Senior Engineer, Security
The Role
We are looking for a Senior Engineer, Security to join our Platform Engineering team. This is a find-and-fix role. When you find a vulnerability in our infrastructure, you write the Terraform or the application change that closes it. Where the fix belongs to another team, you drive it to completion, with the CISO supporting you.
You will report into Platform Engineering and work closely with our CISO, who sets the security agenda and is your escalation route when remediation stalls elsewhere.
Responsibilities
Fix it, don't just find it: Remediate security findings across our infrastructure, writing the Terraform and application changes that close them. Where the fix belongs to another team, drive it to completion. Run vulnerability management from Snyk, Prowler, and ASV findings through to verified fixes.
Own AWS security: Cloud posture across IAM and least privilege, network boundaries, secrets management, and logging coverage. Define the technical security baselines new services are built to, covering host hardening, WAF configuration and deployment patterns, and enforce them as code.
Find problems before anyone else does: Regular penetration testing against our own en
