cloud security engineer

Envision Employment Solutions

<div>Envision Employment Solutions is currently looking for an Cloud Security Engineer for one of our partners, a multinational healthcare provider.
About:
Are you ready to build the primary care platform of the future by becoming an integral part of a dynamic team? If you also believe in the positive transformative power of technology in bringing primary care to the next level - join us!
Responsibilities:<ul><li>
Monitor our security dashboards, triage findings, and plan and implement remediation steps end to end</li><li>
Proactively shape our infrastructure architecture and configuration with security and compliance front of mind</li><li>
Implement infrastructure changes hands-on, applying DevOps practices across infrastructure-as-code, CI/CD, and cloud configuration</li><li>
Keep track of emerging threats, CVEs, and advisories, and drive timely mitigation across our systems</li><li>
Partner with engineering teams to embed security into the development lifecycle rather than bolting it on</li><li>
Help us meet and maintain compliance requirements relevant to healthcare data</li></ul> 

Requirements 
<ul><li>
Solid experience in a DevOps, SRE, or cloud security role, with hands-on infrastructure work</li><li>
Strong knowledge of AWS, containerized workloads (Docker, Kubernetes), and infrastructure-as-code (Terraform)</li><li>
Hands-on experience with cloud security posture management tooling</li><li>
A working understanding of vulnerability management and how to prioritize and remediate threats in practice</li><li>
Familiarity with security and compliance frameworks (eg SOC 2, ISO 27001, GDPR; healthcare-specific frameworks a plus)</li><li>
Comfortable building and maintaining CI/CD pipelines</li><li>
A proactive, ownership-driven mindset and the ability to communicate risk clearly to engineers and stakeholders</li><li>
Proven experience in collaboration with AI tools like Codex or Claude Code</li><li>
English working proficiency</li></ul>
Work Setup:<ul><li>
Flat hierarchies and a collaborative working environment.</li><li>
Attractive compensation package.</li><li>
Option for remote work.</li><li>
Flexible working hours with a high degree of personal responsibility.</li></ul></div>

Cloud Security Engineer

Kainos

<div>
 Join Kainos and Shape the Future
 
 
 At Kainos, we&rsquo;re problem solvers, innovators, and collaborators - driven by a shared mission to create real impact. Whether we&rsquo;re transforming digital services for millions, delivering cutting-edge Workday solutions, or pushing the boundaries of technology, we do it together.
 
 
 We believe in a
 
 people-first culture
 
 , where your ideas are valued, your growth is supported, and your contributions truly make a difference. Here, you&rsquo;ll be part of a diverse, ambitious team that celebrates creativity and collaboration.
 
 
 Ready to make your mark?
 
 Join us and be part of something bigger.
 
 
 
 
 Role Overview
 
 
 
 We are seeking a mid-level
 
 Cloud Security Engineer
 
 to join our Security Engineering team. This role is the first dedicated hire for cloud security within the organisation and will be critical in defining, implementing, and managing security controls across our Azure, AWS and SaaS environments. The successful candidate will work independently, reporting to the Head of Security Engineering, while collaborating with SOC, GRC, IT, Modern Workplace and Systems Engineering teams to build and mature our cloud security posture.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Cloud Security Framework
 </li>
 <ul>
 <li>
 Define and implement the cloud security Framework in collaboration with IT Systems, SOC leadership, and GRC.
 </li>
 </ul>
 <li>
 Implementation
 </li>
 <ul>
 <li>
 Recommending security best practices and implementing controls for Cloud Security and governance.
 </li>
 <li>
 Implementation of automated security tooling to validate security requirements and identify potential issues.
 </li>
 </ul>
 <li>
 Threat Detection &amp; Incident Response
 </li>
 <ul>
 <li>
 Define threat detection and incident response processes and playbooks for cloud environments.
 </li>
 <li>
 Collaborate with the SOC to operationalise detection rules and incident handling.
 </li>
 </ul>
 <li>
 Compliance &amp; Audit
 </li>
 <ul>
 <li>
 Support GRC in meeting evidence and compliance requirements for ISO27001, NCSC Cloud Security Principles, and SOC2.
 </li>
 <li>
 Reviewing the outputs from security tools and security practices. You will filter and prioritise these into security stories that can be understood and actioned by the delivery teams.
 </li>
 </ul>
 <li>
 Collaboration &amp; Enablement
 </li>
 <ul>
 <li>
 Influence and guide junior engineers and developers to adopt secure practices.
 </li>
 <li>
 Upskill and train the wider security team in cloud security topics and tooling.
 </li>
 </ul>
 <li>
 Identity &amp; Access Management
 </li>
 <ul>
 <li>
 Provide input into IAM strategy and policy (RBAC, Conditional Access, MFA, least privilege), working closely with the IT and Systems teams.
 
 
 </li>
 </ul>
 </ul>
 <ul>
 <li>
 Optional / Beneficial Areas
 </li>
 <ul>
 <li>
 Support automation of cloud security (IaC scanning, CI/CD integration).
 </li>
 <li>
 Document standards, runbooks, and training material where appropriate.
 
 </li>
 </ul>
 </ul>
 
 Required Skills &amp; Experience
 
 
 
 <ul>
 <li>
 Previous experience in cloud security engineering or related roles.
 </li>
 <li>
 Working knowledge of industry cloud security frameworks and best practice (CSA STAR, NCSC Cloud Security Principles).
 </li>
 <li>
 Experience with automation and scripting (Python, PowerShell, Bash).
 </li>
 <li>
 Proficiency with:
 </li>
 <ul>
 <li>
 Azure security services: Defender for Cloud, Entra ID, Sentinel etc.
 </li>
 <li>
 AWS security services: Security Hub, GuardDuty, IAM, Config, CloudTrail, CloudWatch.
 </li>
 </ul>
 <li>
 Working knowledge of cloud incident response processes and procedures
 </li>
 <li>
 Strong understanding of security best practices in multi-cloud environments.
 
 </li>
 </ul>
 
 Desirable Skills &amp; Experience
 
 
 
 <ul>
 <li>
 Familiarity with Infrastructure as Code (Terraform)
 </li>
 <li>
 Knowledge of cloud network security concepts (firewalls, NSGs, VPCs, private endpoints).
 </li>
 <li>
 Exposure to compliance frameworks (ISO27001, SOC2, NCSC Cloud Security Principles).
 </li>
 <li>
 Security certifications such as AZ-500, SC-100, AWS Security Specialty, CISSP, or CCSK.
 
 
 </li>
 </ul>
 
 Embracing our differences
 
 
 
 At Kainos, we believe in the power of diversity, equity and inclusion. We are committed to building a team that is as diverse as the world we live in, where everyone is valued, respected, and given an equal chance to thrive.   We actively seek out talented people from all backgrounds, regardless of age, race, ethnicity, gender, sexual orientation, religion, disability, or any other characteristic that makes them who they are.   We also believe every candidate deserves a level playing field.
 
 
 Our friendly talent acquisition team is here to support you every step of the way, so if you require any accommodations or adjustments, we encourage you to reach out.
 
 
 We understand that everyone's journey is different, and by having a private conversation we can ensure that our recruitment process is tailored to your needs.
</div>

Intercom

<div><div>Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences.

Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey &ndash; from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk for one single system that is designed to meet the needs of modern day support teams.

Founded in 2011, Fin became one of the fastest growing companies and remains one of the largest private software companies in the world with nearly 30,000 global businesses using our products to transform their customer support. Driven by our core values, we push boundaries, build with speed and intensity, and relentlessly deliver incredible value to our customers.</div><div><h2 class="jobSectionHeader">
What's the opportunity?</h2>

Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.

The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction.

The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.
<h2 class="jobSectionHeader">
What will I be doing?</h2>
<ul><li>Design and implement secure cloud architectures across our AWS environments.</li>
<li>Build and maintain protective and detective controls that improve visibility into threats across our cloud environments.</li>
<li>Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response.</li>
<li>Lead cloud security investigations and incident response activities in partnership with engineering teams.</li>
<li>Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents.</li>
<li>Build automation that improves the scalability, reliability, and effectiveness of security controls.</li>
<li>Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices.</li>
<li>Develop and improve cloud security standards, guidance, and best practices across Fin.</li>
<li>Drive security initiatives from problem definition through design, implementation, and measurable outcomes.</li>
<li>Assess emerging threats to cloud environments and help evolve our defensive capabilities.</li>
<li>Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities.</li>
<li>Support the secure adoption of AI-assisted software development tools and engineering workflows.</li>
</ul><h2 class="jobSectionHeader">What skills do I need?</h2>
<ul><li>Proven experience in cloud security, security engineering, detection engineering, or a closely related field.</li>
<li>Strong experience securing and operating production AWS environments.</li>
<li>Deep understanding of cloud security principles, modern attack techniques, and security best practices.</li>
<li>Experience building or operating detection, monitoring, or threat detection capabilities.</li>
<li>Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts.</li>
<li>Experience implementing security controls across cloud platforms and production environments.</li>
<li>Strong programming skills and experience building automation, tooling, or operational workflows.</li>
<li>Experience working with infrastructure-as-code practices and modern cloud-native technologies.</li>
<li>Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness.</li>
<li>Ability to communicate security concepts clearly and collaborate effectively with engineering teams.</li>
<li>A pragmatic approach to balancing security, customer impact, and engineering velocity.</li>
</ul><h2 class="jobSectionHeader">Bonus skills &amp; attributes</h2>
<ul><li>Experience building detection engineering, threat hunting, or security operations capabilities at scale.</li>
<li>Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring.</li>
<li>Experience applying AI to detection, response, threat analysis, or security operations workflows.</li>
<li>Familiarity with AWS networking, identity, and cloud security patterns.</li>
<li>Experience working across both large-scale SaaS environments and high-growth companies.</li>
</ul><h2 class="jobSectionHeader">Benefits</h2>

We are a well treated bunch, with awesome benefits! If there&rsquo;s something important to you that&rsquo;s not on this list, talk to us!
<ul>
<li>Competitive salary and equity in a fast-growing start-up</li>
<li>We serve lunch every weekday, plus a variety of snack foods and a fully stocked kitchen</li>
<li>Regular compensation reviews - we reward great work!</li>
<li>Unlimited access to Claude Code and best-in-class AI tools; experimentation &amp; building is encouraged &amp; celebrated.</li>
<li>Pension scheme &amp; match up to 4%</li>
<li>Peace of mind with life assurance, as well as comprehensive health and dental insurance for you and your dependents</li>
<li>Flexible paid time off policy</li>
<li>Paid maternity leave, as well as 6 weeks paternity leave for fathers, to let you spend valuable time with your loved ones</li>
<li>If you&rsquo;re cycling, we&rsquo;ve got you covered on the Cycle-to-Work Scheme. With secure bike storage too</li>
<li>MacBooks are our standard, but we also offer Windows for certain roles when needed.</li>
</ul>
#LI-Hybrid</div><div>
Policies

Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week.

We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our core values.
Fin values diversity and is committed to a policy of Equal Employment Opportunity. Fin will not discriminate against an applicant or employee on the basis of race, color, religion, creed, national origin, ancestry, sex, gender, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, gender identity, gender expression, marital status, or any other legally recognized protected basis under federal, state, or local law.</div></div>

TECHNOLOGENT

<div>The Opportunity: We are seeking a Cloud Security Engineer &ndash; Oracle Cloud Infrastructure (OCI) to design, implement, and maintain secure cloud environments across Oracle Cloud Infrastructure platforms. This role will work closely with cloud engineering, security, operations, and product teams to establish secure-by-default cloud architectures, implement policy-as-code frameworks, and drive infrastructure automation initiatives. 
 
The ideal candidate has strong expertise in OCI foundational services, cloud security controls, infrastructure-as-code, and policy governance, along with a passion for building scalable, secure, and highly available cloud solutions.
<ul><li>Role: Oracle Cloud Security Engineer &ndash; OCI</li>
<li>Experience: 6+ Years</li>
<li>Work Location: Phoenix, AZ</li>
<li>Project Duration: 12+ Months Contract</li>
</ul>
 
Responsibilities
<ul><li>Design, implement, and maintain secure cloud infrastructure solutions within Oracle Cloud Infrastructure (OCI)</li>
<li>Develop and manage Infrastructure-as-Code (IaC) solutions using Terraform and related automation tools</li>
<li>Define, implement, and maintain Policy-as-Code (PaC) frameworks using Sentinel and cloud-native policy enforcement mechanisms</li>
<li>Enhance cloud security guardrails and governance controls by collaborating with CNAPP and security teams to enforce secure-by-default cloud configurations</li>
<li>Configure and support OCI foundational services including IAM, VPC, Compute, Storage, Cloud Logging, and Security Controls</li>
<li>Troubleshoot, reproduce, and resolve customer-reported issues across Oracle Cloud services and underlying cloud architectures</li>
<li>Support and secure Oracle PaaS services including Oracle Analytics Cloud, Oracle Integration Cloud, Storage, Streaming, and related offerings</li>
<li>Design cloud architectures that ensure high availability, resilience, visibility, and security</li>
<li>Implement and maintain cloud logging, monitoring, metrics collection, and security visibility solutions</li>
<li>Develop tools and automation solutions to improve operational efficiency and accelerate issue diagnosis</li>
<li>Collaborate with engineering, sales, customer success, and operations teams to resolve technical deployment challenges</li>
<li>Act as a subject matter expert for Oracle Cloud Infrastructure security, governance, and cloud-native architecture</li>
<li>Participate in Agile development processes and contribute to engineering standards, best practices, and continuous improvement initiatives</li>
</ul>Required Qualifications
<ul><li>Bachelor's or Master's degree in Computer Science, Computer Engineering, Information Technology, or a related technical discipline, or equivalent work experience</li>
<li>5+ years of experience working with Oracle Cloud Infrastructure (OCI) foundational services including:
<ul><li>Identity and Access Management (IAM)</li>
<li>Virtual Cloud Networks (VCN/VPC)</li>
<li>Compute Services</li>
<li>Storage Services</li>
<li>Cloud Logging and Monitoring</li>
<li>Security Controls and Governance</li>
</ul></li><li>Hands-on experience with:
<ul><li>Terraform</li>
<li>Sentinel</li>
<li>Infrastructure Automation</li>
<li>Policy-as-Code (PaC) frameworks</li>
</ul></li><li>Strong understanding of cloud-native security controls and governance models</li>
<li>Experience implementing security controls across cloud-native infrastructure environments</li>
<li>Knowledge of Oracle PaaS security including:
<ul><li>Data Security</li>
<li>Network Security</li>
<li>Workload Isolation</li>
<li>Policy Enforcement</li>
</ul></li><li>Experience with cloud logging and monitoring solutions, metrics analysis, and observability platforms</li>
<li>Software development experience in one or more object-oriented programming languages:
<ul><li>Java</li>
<li>Python</li>
<li>Go</li>
</ul></li><li>Understanding of cloud architecture principles including high availability, resiliency, scalability, and security</li>
<li>Experience troubleshooting complex cloud infrastructure and platform issues</li>
<li>Strong analytical, problem-solving, and communication skills</li>
</ul>Preferred Qualifications
<ul><li>Experience with Cloud Native Application Protection Platforms (CNAPP)</li>
<li>FinOps or Cloud Cost Optimization knowledge</li>
<li>Experience with cloud security posture management and compliance frameworks</li>
<li>Familiarity with DevSecOps practices and automation</li>
<li>Experience working with enterprise-scale cloud deployments</li>
<li>Knowledge of CI/CD pipelines and automation frameworks</li>
<li>Exposure to container technologies and orchestration platforms</li>
<li>Experience supporting customer-facing cloud environments</li>
</ul>What We're Looking For
<ul><li>Strong problem-solving and analytical abilities</li>
<li>Passion for cloud security, automation, and scalable infrastructure design</li>
<li>Ability to quickly learn and adopt emerging technologies</li>
<li>Excellent communication and stakeholder management skills</li>
<li>Ability to translate technical and business requirements into practical cloud solutions</li>
<li>Strong collaboration skills with engineering, operations, sales, and customer teams</li>
<li>Commitment to security best practices and continuous improvement</li>
<li>Ability to thrive in a fast-paced, Agile development environment</li>
</ul>
 
Technologent is an Equal Opportunity Employer - EEO/AA Employer/Vet/Disabled - for reasonable accommodations, please contact us at hr@technologent.com 
 
Technologent is a Global Provider of Edge-to-Edge℠ Information Technology Solutions and Services for Fortune 1000 and SMB companies. We offer a unique blend of business practices that are aligned to solve for top CIO concerns. Our core competencies focus on data center infrastructure, business continuity, data protection, service automation and orchestration, continuous intelligence, monitoring, connectivity, collaboration and cybersecurity. These practices are supported by our professional services, digital transformation services and financial services offerings. By providing custom solutions and services designed to fit your business needs, we enable your organization to be more agile, responsive and competitive. Technologent empowers your company to ascend to the next level in IT. 
 
Headquartered in Irvine, CA, Technologent has offices throughout the US and proudly serves clients around the world. When partnering with Technologent, organizations benefit from the highest caliber of professionals, committed to delivering exceptional business outcomes backed by unmatched service and support.</div>

Oracle Cloud Security Engineer

ByDesign Secure

This role is delivered within secure environments. Candidates must be eligible for UK SC and DV clearance and hold UK Citizenship.Opening: Join the MissionAt ByDesign Secure, we believe that world-class security shouldn't be an afterthought&mdash;it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we are working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help architect a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in &quot;billing by the hour&quot; or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.About the Opportunity<ul><li>We are seeking a skilled Cloud Security Engineer to design and implement secure workloads within a Google Distributed Cloud (GDC) environment.</li><li>This role is ideal for a security professional with a strong GCP background (Other CSP experience also considered) and an active Professional Cloud Security Engineer certification, as these competencies are directly transferable to managing security in air-gapped or edge configurations.</li><li>You will be responsible for ensuring security, rigour, and compliance within mission-critical government secure delivery.</li></ul>What You&rsquo;ll Be Doing<ul><li>Identity &amp; Access Management: Designing and managing complex identity architectures, including single sign-on (SSO) integration, multi-factor authentication (MFA), and the automated lifecycle management of privileged user accounts.</li><li>Authorisation &amp; Resource Hierarchy: Defining granular resource hierarchies and implementing the principle of least privilege using advanced identity policies, conditions, and organizational constraints.</li><li>Boundary &amp; Perimeter Protection: Configuring robust network defences, including next-generation firewalls, web application firewalls (WAF), and secure service perimeters to isolate sensitive workloads.</li><li>Data Protection &amp; Encryption: Implementing discovery and redaction services for sensitive data (PII) and managing full-lifecycle encryption through hardware or software-based key management systems.</li><li>Securing the Software Supply Chain: Automating vulnerability scanning and policy enforcement within continuous integration and delivery (CI/CD) pipelines to ensure only authorised code is deployed.</li></ul>Key Tools/Working practices<ul><li>Use GDC Console, gdcloud CLI, and kubectl to manage infrastructure, users, workloads, security policies, and platform resources across projects and clusters</li><li>Implement Terraform and Ansible with Git‑based workflows to deliver repeatable, version‑controlled infrastructure and configuration (GitOps), including Config Sync for consistent environments</li><li>Configure IAM, RBAC, service accounts, and identity provider integration to enforce least‑privilege access and secure authentication, with policy enforcement via OPA Gatekeeper</li><li>Define and secure network boundaries using project network policies (ingress/egress control) and manage encryption and trust with KMS and Certificate Authority services</li><li>Build and package applications using Docker and Helm, store images in Harbor, and integrate vulnerability scanning (e.g. Trivy) to detect and remediate issues before deployment</li><li>Test and interact with APIs using curl/REST tools and develop AI capabilities using Vertex AI libraries and notebook environments (e.g. JupyterLab)</li><li>Monitor and troubleshoot using Grafana, Prometheus, and Loki for metrics and logs, with audit logging and SIEM integration for security and compliance</li><li>Configure alerting for failures, anomalies, and SLO breaches, and implement backup and restore processes for resilience and disaster recovery</li><li>Use platform documentation and support channels to validate configurations, follow operational procedures, and resolve issues</li></ul>What You&rsquo;ll Bring<ul><li>Demonstrable experience as a practicing Security Engineer, with the ability to transition cloud-native security best practices to a distributed/edge platform.</li><li>Deep proficiency in configuring network security defences, threat monitoring, and regulatory compliance controls.</li></ul>Bonus Points For<ul><li>Current, non-expired Professional Cloud Security Engineer certification.</li><li>Experience operating within or alongside classified UK Government secure environments (e.g., SECRET or above).</li><li>Familiarity with GDS Service Standards or equivalent public sector delivery frameworks.</li><li>Experience working in air-gapped or disconnected environments with little or no internet connectivity</li></ul>Clearance Requirements:<ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).</li></ul>Work Location: Hybrid remote in LondonJob Types: Temporary, Fixed term contract (Outside of IR35)Job Types: Fixed term contract, TemporaryPay: &pound;650.00 per dayApplication question(s):<ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul>Work Location: Hybrid remote in London

Cloud Security Engineer – SC Eligible – Government Projects

Data Idols

<div><h2 class="jobSectionHeader">Staff Security Engineer</h2>

Salary: Up to &pound;150,000 + Benefits

Location: London (Hybrid &ndash; 3 days per week in the office)

We are currently looking for a Staff Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Staff Security Engineer will play a pivotal role in shaping the organisation&rsquo;s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.

This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.
<h2 class="jobSectionHeader">
The Opportunity</h2>

As the Staff Security Engineer, you&rsquo;ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure-by-design culture across the business.

Key responsibilities include:
<ul>
<li>Driving application and product security initiatives across multiple engineering teams</li>
<li>Conducting security reviews, threat modelling and risk assessments</li>
<li>Implementing and improving vulnerability management processes</li>
<li>Embedding security tooling into CI/CD pipelines and development workflows</li>
<li>Partnering with developers to promote secure coding practices</li>
<li>Reviewing cloud infrastructure and architecture from a security perspective</li>
<li>Supporting incident response and remediation activities when required</li>
<li>Defining and promoting security standards, policies and best practices</li>
<li>Influencing technical decision-making across engineering and leadership teams</li>
</ul>
This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.
<h2 class="jobSectionHeader">
What&rsquo;s in it for you?</h2>
<ul><li>Salary up to &pound;150,000</li>
<li>Hybrid working model</li>
<li>Opportunity to work on cutting-edge AI and technology products</li>
<li>High level of autonomy and influence</li>
<li>Collaborative engineering culture</li>
<li>Career progression opportunities as the business continues to scale</li>
<li>Ongoing learning and professional development</li>
<li>Pension scheme</li>
<li>Generous holiday allowance</li>
</ul><h2 class="jobSectionHeader">Skills and Experience</h2>
<ul><li>Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer</li>
<li>Strong understanding of application security principles and secure software development practices</li>
<li>Experience working closely with software engineering teams</li>
<li>Hands-on experience securing cloud environments (AWS, GCP or Azure)</li>
<li>Experience with vulnerability management, threat modelling and security reviews</li>
<li>Knowledge of CI/CD security and modern development practices</li>
<li>Excellent stakeholder management and communication skills</li>
</ul><h3 class="jobSectionHeader">Eligibility</h3>

Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.

If you would like to be considered for the role and feel you would be an ideal fit, please submit your CV by clicking the Apply button below.</div><div></div>

Staff Security Engineer

This role is delivered within secure environments. Candidates must be eligible for UK Security Clearance (SC and DV) and hold UK Citizenship.Opening: Join the MissionAt ByDesign Secure, we design and deliver secure-by-default digital platforms for high‑assurance environments. We are currently building a new secure cloud platform based on Google Distributed Cloud (GDC) and are looking for a Security Engineer (SIEM) to lead the design and implementation of its security monitoring and observability capabilities.This role offers the opportunity to build a SIEM capability from the ground up, influence security architecture decisions, and directly support SOC operations protecting critical public‑sector services.About the OpportunityAs a Security Engineer (SIEM) at ByDesign Secure, you will be responsible for building and enhancing our security monitoring and detection capabilities across complex environments. You will design and maintain SIEM use cases, onboard and normalise data sources, and continuously tune detections to improve threat visibility and response.Working closely with incident response and platform teams, you will turn security data into actionable insight, helping to strengthen detection coverage, reduce noise, and advance the organisation&rsquo;s overall security maturity.Role Purpose<ul><li>As a Security Engineer, you will be responsible for designing, building, and operating the Security Information and Event Management (SIEM) and security observability stack for a new GDC‑based platform.</li><li>You will:</li><li>Define how security logs, metrics, alerts, and telemetry are collected, processed, retained, and visualised.</li><li>Establish a cloud-native SIEM tool and monitoring capability.</li><li>Integrate cloud‑native monitoring with existing on‑premise SOC tooling.</li><li>Enable SOC analysts by providing reliable, actionable security insights.</li><li>You will work closely with cloud engineers, security architects, SOC teams, and external vendors to ensure the solution meets security, operational, and compliance requirements.</li></ul>What You&rsquo;ll Be DoingSIEM Architecture &amp; Design<ul><li>Work with security and solution architects to design the end‑to‑end SIEM architecture for a secure Google Distributed Cloud (GDC) environment.</li><li>Define log, event and telemetry standards across platform, infrastructure, Kubernetes, and application layers.</li><li>Decide which data sources are monitored locally versus forwarded to an existing on‑prem SIEM.</li></ul>SIEM Implementation &amp; Integration<ul><li>Deploy Elastic SIEM using standard or shared Kubernetes clusters where appropriate.</li><li>Configure secure log forwarding from GDC components to an on‑prem SIEM over dedicated, encrypted network links.</li><li>Integrate cloud audit logs, Kubernetes logs, workload logs, and security tooling into Elastic and on‑prem platforms.</li></ul>Detection Engineering &amp; SOC Enablement<ul><li>Implement detections‑as‑code, version‑controlled and automated through CI/CD pipelines.</li><li>Create and tune detection rules, alerts, and dashboards for SOC analysts.</li><li>Align detections with threat intelligence and playbooks (e.g. Mandiant‑aligned SOC workflows).</li></ul>Observability &amp; Troubleshooting<ul><li>Support monitoring of logs, metrics, and security signals to aid both security response and operational debugging.</li><li>Enable Platform Admins and Application Operators to self‑serve diagnostics while maintaining security boundaries.</li></ul>Documentation &amp; Guidance<ul><li>Produce clear guidance for:</li><li>Platform Administrators configuring SIEM integrations</li><li>Application teams onboarding workloads and logs</li><li>SOC analysts using dashboards, alerts, and queries</li><li>Contribute to runbooks, operational procedures, and incident response documentation.</li></ul>Security &amp; Compliance<ul><li>Ensure logging and monitoring meet UK Government and high‑assurance security requirements.</li><li>Support audits, assurance activities, and continuous improvement of the monitoring posture.</li></ul>What You&rsquo;ll BringEssential Skills &amp; Experience<ul><li>Strong experience as a Security Engineer, Detection Engineer or SIEM Engineer.</li><li>Hands‑on experience designing or operating SIEM solutions in cloud or hybrid environments.</li><li>Practical knowledge of Elastic SIEM / Elastic Stack, including:</li><li>Indexing and ingest pipelines</li><li>Detection rules and alerts</li><li>Dashboards and visualisations</li><li>Experience working with Kubernetes environments and their logging/monitoring patterns.</li><li>Familiarity with secure log forwarding, encryption, and network‑restricted environments.</li><li>Ability to work closely with SOC teams and translate security requirements into technical implementations.</li></ul>Cloud &amp; Platform Knowledge<ul><li>Experience with Google Cloud Platform (GCP) or Google Distributed Cloud (GDC).</li><li>Understanding of cloud audit logs, identity logs, and platform‑level telemetry.</li><li>Experience deploying tools through cloud marketplaces or CI/CD pipelines.</li></ul>Ways of Working<ul><li>Comfortable working in high‑assurance, regulated environments.</li><li>Strong documentation and communication skills.</li><li>Able to work independently and take ownership of complex security integrations.</li></ul>Bonus Points For<ul><li>Existing UK Government Security Clearance (SC or above)</li><li>Hands‑on experience with Elastic Cloud on Kubernetes (ECK).</li><li>Experience implementing detections as code using Git, CI/CD, and infrastructure‑as‑code.</li><li>Knowledge of threat frameworks.</li><li>Familiarity with UK Government security standards and assurance processes</li></ul>Clearance Requirements:<ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV)</li></ul>Work Location: Hybrid remote in LondonJob Types: Temporary, Fixed term contractJob Types: Fixed term contract, TemporaryPay: &pound;625.00 per dayApplication question(s):<ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul>Work Location: Hybrid remote in London

Security Engineer (SIEM) – SC Eligible – Government Projects

Search 10000+ Cloud security engineer jobs near you this July. New roles added regularly across leading industries. Apply today.

10000 cloud security engineer jobs Near Me

Cloud Security Engineer

Cloud Security Engineer

Cloud Security Engineer

Oracle Cloud Security Engineer

Cloud Security Engineer – SC Eligible – Government Projects

Staff Security Engineer

Security Engineer (SIEM) – SC Eligible – Government Projects