Cloud Security Engineer

Senior Security Engineer (Cloud and SecOps) | Poland, Remote You’ll own threat detection, response and prevention across an AWS-hosted SaaS platform used by some of the world’s largest banks. That means the SIEM, the managed SOC relationship and the run-time security of the AWS estate, with you leading the response when incidents happen. - Location: Poland, remote (occasional travel) - Level: Senior, reporting to the Head of Information Security You’ll join a small Information Security team across London and Poland at an enterprise SaaS company, working alongside GRC and a Senior Product Security Engineer. Senior Security Engineer - What you’ll actually do: - Own the SIEM: onboard log sources, build and tune detections, and track coverage against MITRE ATT&CK - Act as internal owner of the managed SOC, including runbooks, service reviews, triage quality and SLAs - Lead incident response end to end, from triage and containment to root cause analysis - Own AWS run-time security, including IAM, organisational guardrails and logging coverage, and secure the corporate estate (Google Workspace, endpoints, SaaS apps) - Run infrastructure vulnerability management, external attack surface management and penetration testing - Automate security processes with scripting and infrastructure-as-code Senior Security Engineer - What you’ll need: Essential: - Security operations or cloud security engineering experience, including leading incident response in cloud environments - Hands-on SIEM work, designing and tuning detections as well as responding to alerts - In-depth AWS security knowledge: IAM, Organizations and SCPs, CloudTrail, GuardDuty, Security Hub, KMS and VPC design - Container and Kubernetes runtime security, ideally on Amazon EKS - Experience working with or managing a managed SOC or MDR provider - Python or similar scripting, plus working knowledge of infrastructure-as-code Nice to have: - Detection-as-code, SOAR or automated response playbooks - CSPM or CNAPP tooling - Familiarity with DORA, ISO 27001 and SOC 2 - AWS Certified Security Specialty, GCIH, GCIA or GCFA What’s in it for you - Private medical insurance, healthcare cashback scheme and 4x salary life assurance - Unlimited annual holiday and enhanced family leave - Work abroad for up to 6 weeks a year - Learning and development budget If you meet most but not all of the essentials, we’d still like to hear from you. LT Harper is handling this search on our client’s behalf. If you’re interested, apply directly on this advert. If you have any questions, or would like to refer someone, reach out to Adam Sawa at a.sawa@ltharper.com.