Senior Security Engineer
Core
Strengthen security of cloud platforms, infrastructure, engineering practices, and internal systems while supporting the maturity of the Information Security programme.
Role type
Senior Security Engineer (Cloud & Infrastructure)
Builds
Cloud security controls, secure architecture, security tooling, and incident response processes for Orfium's cloud platforms and workloads.
Domain
Cloud security, infrastructure security, and compliance within the music technology industry.
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cloud security, networking, IAM, application security, vulnerability management, incident response, security assessments, compliance frameworks (ISO 27001, SOC 2), risk assessment, secure coding practices, secrets management, access governance.
Preferred skills
SaaS security, CI/CD security, WAF, vendor security reviews, security awareness programme design, tabletop exercises, BCP/DRP processes.
Technologies
AWS, GCP, GitHub, vulnerability scanners, endpoint security platforms, access governance tools.
Responsibilities
Create and support security controls across cloud platforms; partner with engineering teams on secure architecture and secure coding; run security assessments, vulnerability reviews, and penetration testing; manage security tooling and processes; define and test incident response processes; support business continuity and disaster recovery; collaborate on identity and access management controls.
Seniority
Senior, hands-on IC
