Senior Security Engineer - AI-Driven Cloud Security Lead

The Mill Adventure Limited; Madrid; Ibrido; EUR 120.000 - 150.000; Tempo pieno

Vantaggi offerti da questo lavoro

Private health insurance

Learning budget

Flexible working environment

Equipment of your choice

Descrizione del lavoro

The Mill Adventure Limited is seeking a Senior Security Engineer to own security across code, cloud, pipelines, and the corporate estate. This hands-on role requires architectural ownership and collaboration with developers and architects to deliver secure systems in 2026, leveraging AI as a force multiplier.

You will design, implement and automate controls in AWS and Cloudflare, drive vulnerability management, and shepherd secure SDLC practices across teams.

Competenze

• 5+ years hands-on in a technical security engineering role, including time where you were the person accountable for the fix, not the person who raised the ticket.
• You design and you deliver. You can produce an architecture that survives review, and you have a track record of things you designed actually going live.
• Judgement across security engineering, IT security, security operations and offensive security.
• Deep AWS security: IAM, Organizations and SCPs, Security Hub, GuardDuty, WAF, plus Cloudflare.
• You write code that runs in production and that other people depend on — Python, Go, Bash, with TypeScript a major plus.
• Infrastructure as Code and its real failure modes: drift, over-permissive modules, secrets in state, pipeline privilege escalation
• Vulnerability and attack surface management you have personally run
• Solid understanding of SIEM and detection engineering
• Detection and response you have personally done.
• Working offensive knowledge.
• Practical use of AI in your security work today
• A current, specific view on AI-driven threats
• SDLC security: SAST, DAST and SCA
• The ability to work autonomously without going dark
• Comfort with open technical debate.

Mansioni

• Architect and lead the design and implementation of security controls across our cloud infrastructure, applications and CI/CD pipelines — and build them yourself
• Coach and mentor developers, engineers and architects on secure design, threat modelling and cloud security, so that security scales beyond the security team
• Own vulnerability management and our attack surface: know what is exposed, prioritise by real exploitability rather than scanner severity, and drive findings to closure with the teams that own them
• Own the security of the SDLC by integrating and tuning SAST, DAST and SCA so that developers keep them enabled because the signal is worth the friction
• Engineer and maintain our cloud security posture, primarily in AWS and Cloudflare — hardening configurations, automating compliance checks, and closing gaps before they are found for you
• Own detection and response end to end: shape what we log and alert on, tune out the noise, investigate what is real, remediate it, and write up what happened
• Architect and guide our IAM strategy, working with engineering to deliver least-privilege access for human and machine identities that teams don't route around
• Test our own systems. Use offensive techniques against our infrastructure, applications and identity flows to validate that controls work and to decide what actually gets fixed first
• Use AI as a force multiplier for a team that is small relative to its surface — agentic tooling for triage, code review, detection engineering, evidence collection and the automation of toil. You will also be the person who secures AI systems as we adopt them
• Automate everything. If you would otherwise do it twice, automate it
• Bring us the uncomfortable assessments — with a plan and a first PR attached

Conoscenze

Security engineering

Cloud security

Threat modelling

Python

Go

Strumenti

SAST

DAST

SCA

Descrizione del lavoro

The Mill Adventure Limited is seeking a Senior Security Engineer to own security across code, cloud, pipelines, and the corporate estate. This hands-on role requires architectural ownership and collaboration with developers and architects to deliver secure systems in 2026, leveraging AI as a force multiplier.

You will design, implement and automate controls in AWS and Cloudflare, drive vulnerability management, and shepherd secure SDLC practices across teams.