Senior Security Engineer

Accountabilities

• Security Automation and Compliance Engineering: Design and implement automated evidence collection pipelines across AWS, GitHub, CI/CD systems, and identity management tools. Select and manage compliance automation solutions, ensuring security controls are continuously verified through code rather than manual processes.

• Identity and Access Management: Automate access reviews across AWS IAM, Google Workspace, GitHub, and essential SaaS applications. Develop self-service access request workflows in collaboration with Platform and IT teams, while strengthening identity governance for employees, workloads, and AI agents.

• Cloud and Infrastructure Security: Identify and remediate IAM weaknesses, including unused roles, excessive permissions, long-lived credentials, and privileged root or emergency access. Promote short-lived, appropriately scoped identities with clear ownership.

• Infrastructure Security Guardrails: Develop and maintain Terraform and CI/CD security controls, including secrets scanning, policy validation, signed container images, and standardized security baselines for cloud accounts and Kubernetes clusters.

• Threat Detection and Incident Response: Participate in on-call and security incident triage rotations. Investigate alerts generated by AWS GuardDuty, Security Hub, WAF, and Kubernetes, manage vulnerability and bug bounty reports, and coordinate incident containment and resolution.

• Detection Engineering: Develop and continuously improve security detections using CloudTrail, GuardDuty, WAF, and Kubernetes telemetry. Contribute to cross-signal correlation capabilities and AI-assisted security alert triage.

• Security Reviews and Risk Assessment: Validate penetration testing findings and vulnerability remediation activities, review infrastructure and IAM changes, and contribute to threat modelling for new services and AI-related features.

• Security Assurance and Certification: Lead the ISO 27001, ISO 42001, SOC 2, and PCI DSS programmes. Establish a unified control framework across standards, manage compliance scope and gap assessments, coordinate with external auditors, track remediation activities, and oversee ongoing surveillance and certification cycles.

• Customer and Vendor Security Management: Own customer security questionnaires and third-party vendor security reviews. Maintain security documentation and trust materials, while developing AI-assisted tools to streamline questionnaire responses.

• Governance and Regulatory Compliance: Maintain clear and up-to-date security policies and risk registers. Translate evolving regulatory requirements, including DORA, the EU AI Act, and regional financial regulations, into practical security controls and engineering initiatives.

Requirements:

• At least 5 years of professional experience in security engineering, with substantial hands-on experience securing AWS environments.

• Strong knowledge of AWS security services and technologies, particularly IAM, CloudTrail, GuardDuty, Security Hub, and WAF, with the ability to investigate incidents directly from infrastructure logs.

• Practical experience with Terraform, Kubernetes, and GitHub Actions, including the ability to review infrastructure modules and CI/CD workflows for security and policy compliance.

• Programming experience in Python or a similar language, with the ability to automate evidence collection, access reviews, alert enrichment, and security workflows.

• Familiarity with APIs, CI/CD pipelines, and infrastructure automation practices.

• Proven experience leading an ISO 27001 or SOC 2 certification programme, ideally acting as the primary point of contact for external auditors.

• Experience managing customer security questionnaires, vendor assessments, and security due diligence processes.

• Strong understanding of cloud security, identity and access management, infrastructure hardening, vulnerability management, and incident response.

• Excellent written English communication skills, with the ability to produce clear and concise documentation for auditors, technical teams, and customers.

• Strong organizational and prioritization skills, with the ability to make independent decisions, manage competing priorities, and work effectively against a defined roadmap.

• Proactive and collaborative mindset, with the confidence to take ownership of security initiatives while recognizing when to seek support.

• Experience with ISO 42001, AI governance, PCI DSS in a service provider environment, or DORA and financial-sector regulatory requirements is a strong advantage.

• Additional experience in detection engineering, incident response, Kyverno, Linkerd, or Amazon EKS security tooling would be considered a plus.

Benefits:

• Opportunity to take ownership of a broad security engineering and assurance programme within an innovative technology environment.

• Exposure to advanced cloud infrastructure, AI technologies, and real-time fraud prevention systems.

• Opportunity to lead and automate internationally recognized security certification and compliance programmes.

• Collaborative environment working alongside experienced application security, platform security, and engineering professionals.

• Significant technical ownership and the opportunity to influence security architecture, processes, and engineering standards.

• Professional development opportunities in cloud security, AI governance, regulatory compliance, and security automation.

• Opportunity to contribute to protecting financial and digital services used by businesses worldwide.

• Inclusive and diverse working environment that values individual perspectives and equal employment opportunities.