Senior Security Engineer

Description

The company wants to cut the hours teams spend on data work by 90%.

Its enterprise data automation platform lets teams automate data controls using no-code tools, cloud services and AI.

The platform runs data from intake to output for structured files such as Excel and RTF, and unstructured ones such as PDFs and emails, helping firms trust their data, act faster, cut costs, lower risk and meet regulatory duties.

Based in London with offices in New York, Wroclaw, Singapore and Antwerp, the company serves more than 15 of the world's largest international banks, along with brokers, exchanges, asset managers, hedge funds, administrators, service providers and corporates.

This Senior Security Engineer (Cloud & SecOps) role sits in the Information Security team and covers threat detection, response and prevention across the AWS-hosted SaaS platform.

Responsibilities

• Own the run-time security of the AWS environment, covering identity and access management (IAM), organisational guardrails, logging coverage and fixing cloud security findings.
• Secure the corporate environment, including Google Workspace, endpoints and SaaS apps, and work with IT to set and enforce identity, access and device standards.
• Lead the infrastructure vulnerability management programme, ranking fixes by risk and driving them with the Platform and IT teams.
• Build and run external attack surface management.
• Coordinate infrastructure and external penetration tests, from scoping to closing out remediation.
• Own the SIEM, including onboarding log sources, building and tuning detection use cases, and tracking coverage against the MITRE ATT&CK framework.
• Serve as the internal owner of the managed SOC, covering escalation runbooks, service reviews, triage quality and service level agreements (SLAs).
• Lead security incident response from triage and containment through to post-incident review and root cause analysis.
• Track emerging threats and recommend improvements to detection and response.
• Automate repetitive security work with scripting and infrastructure-as-code.
• Produce operational security metrics that feed risk reporting and key risk indicators (KRIs).
• Support internal audits and client assurance by showing that operational security controls work as intended.

Requirements

• Proven experience in security operations or cloud security engineering.
• Hands-on SIEM experience, including designing and tuning detections and responding to alerts.
• Deep knowledge of AWS security services and architecture, including IAM, Organizations and Service Control Policies (SCPs), CloudTrail, GuardDuty, Security Hub, KMS and VPC design.
• Experience securing containers and Kubernetes at runtime, ideally on Amazon EKS.
• A record of leading security incident response in cloud environments.
• Experience working with or managing a managed SOC or Managed Detection and Response (MDR) provider.
• Proficiency in Python or a similar scripting language for automation.
• Working knowledge of infrastructure-as-code.
• Ability to explain technical risk clearly and briefly to non-technical stakeholders.
• Desirable: experience with detection-as-code practices.
• Desirable: experience with Security Orchestration, Automation and Response (SOAR) platforms or automated response playbooks.
• Desirable: experience with Cloud Security Posture Management (CSPM) or Cloud-Native Application Protection Platform (CNAPP) tools.
• Desirable: familiarity with financial services regulation and standards such as the Digital Operational Resilience Act (DORA), ISO 27001 and SOC 2.
• Desirable: relevant professional certifications such as AWS Certified Security Specialty, GCIH, GCIA or GCFA.
• Desirable: experience using threat intelligence to set detection priorities.

Conditions

Work in a small, collaborative team across London and Wroclaw.

Work closely with the Governance, Risk and Compliance (GRC) function and the Senior Product Security Engineer, who covers security across the software development lifecycle (SDLC) and CI/CD pipeline.

Partner with the Engineering, Platform and IT teams.

Report to the Head of Information Security.

Benefits

• Competitive salary aligned with your skills and experience, reviewed annually.
• Success Share bonus payments.
• Private medical insurance through Enel Med.
• Life insurance.
• Multisport Program.
• Unlimited annual holiday.
• Enhanced family leave.
• Employee Assistance Programme and EAP Wellbee.
• 4 volunteering days off.
• Referral bonus for hiring someone great you have recommended.
• Spot Rewards.