Security Engineer

Security Engineer: Cloud & SecOps or Application Security | London, hybrid You'll join a small Information Security team at a London-headquartered B2B SaaS platform used by global banks, brokers and asset managers, and you'll own a domain end to end. There are two seats: one owning detection, response and AWS run-time security, the other owning security across the software development lifecycle. The essentials - Salary: up to 75K GBP/annum + annual performance bonus, unlimited holidays - London, hybrid: 2 days a week in the office - Senior individual contributor, reporting to the Head of Information Security - UK right to work required; visa sponsorship isn't available Security Engineer - What you'll do: Cloud & SecOps track - Own the SIEM: onboard log sources, build and tune detections, track coverage against MITRE ATT&CK - Run the managed SOC relationship: escalation runbooks, triage quality and SLAs - Lead incident response in AWS end to end, from containment to root cause analysis - Own AWS run-time security: IAM, SCPs, GuardDuty, Security Hub and logging coverage Application Security track - Own pipeline guardrails: SAST, SCA, secrets, IaC and container scanning, with gating agreed with Engineering - Turn ASPM findings into prioritised, remediated work based on reachability and exploitability - Lead threat modelling and secure design reviews, and grow a security champions network Security Engineer - What you'll need: Essential - 5+ years in security engineering with hands-on AWS (strong Azure plus some AWS considered) - Experience in SaaS or product companies, not only large-enterprise environments - Cloud & SecOps: designing and tuning detections, and leading incident response in the cloud - AppSec: integrating security tooling into CI/CD, and reading code in Java, Ruby or Python - Python or similar scripting, plus working knowledge of infrastructure-as-code - Explaining technical risk clearly to non-technical people Nice to have - Regulated-environment experience: DORA, ISO 27001 or SOC 2 - Kubernetes or EKS security - Detection-as-code, SOAR, CSPM/CNAPP, or ASPM and supply chain security (SBOMs, SLSA) - Certifications such as AWS Security Specialty, GIAC or OSWE (helpful, not required) What's in it for you - Annual performance bonus - Unlimited holiday (most people take 30 to 35 days) - Private medical, healthcare cashback and 4x salary life assurance - Training budget and flexible working hours - Enhanced family leave and up to 6 weeks a year working abroad - 4 volunteering days, Cycle to Work and Tech Scheme Apply LT Harper is handling this search on our client's behalf. If you're interested, apply directly on this advert. If you have any questions, or would like to refer someone, reach out to Adam Sawa at a.sawa@ltharper.com. If you meet most but not all of the essentials, we'd still like to hear from you, and if you need any adjustments during the process, tell us and we'll make them.