Senior Security Engineer
Core
Protect a real-time, cloud-based fraud prevention platform serving customers in highly regulated industries worldwide by combining hands-on cloud security engineering with ownership of security assurance and compliance programmes.
Role type
Senior Security Engineer (Cloud & Compliance)
Builds
Automated security controls, evidence collection pipelines, and compliance frameworks for a cloud-based fraud prevention platform.
Domain
Cloud Security, Identity & Access Management, Regulatory Compliance (ISO, SOC 2, PCI DSS)
Required skills
AWS security services (IAM, CloudTrail, GuardDuty, Security Hub, WAF), Terraform, Kubernetes, GitHub Actions, Python programming, ISO 27001/SOC 2 certification leadership, customer security questionnaire management, incident response, threat modelling
Preferred skills
ISO 42001, AI governance, PCI DSS in service provider environments, DORA, financial-sector regulations, detection engineering, Kyverno, Linkerd, Amazon EKS security tooling
Technologies
AWS, Kubernetes, Terraform, GitHub, Python, CloudTrail, GuardDuty, Security Hub, WAF, ISO 27001, ISO 42001, SOC 2, PCI DSS
Responsibilities
Design and implement automated evidence collection pipelines across AWS and CI/CD systems; Automate access reviews and identity governance for employees, workloads, and AI agents; Identify and remediate IAM weaknesses and promote short-lived identities; Develop and maintain Terraform and CI/CD security controls including secrets scanning and policy validation; Participate in on-call rotations and manage vulnerability and bug bounty reports; Develop and improve security detections using CloudTrail and Kubernetes telemetry; Lead ISO 27001, ISO 42001, SOC 2, and PCI DSS certification programmes; Own customer security questionnaires and third-party vendor security reviews; Maintain security policies and translate regulatory requirements into engineering initiatives
Seniority
Senior, hands-on IC with strategic ownership
