Cloud Security Engineer

The French Sourcer; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private health cover

Pension contribution

Equity plan

Flexible working

Job summary

The French Sourcer is seeking a Cloud Security Engineer to join our London team. You will review and strengthen security controls across AWS environments, implement IaC policies with Terraform, and manage IAM, access, and privileged permissions.

You will also secure Kubernetes, integrate security into CI/CD, and support audits with robust incident response practices. Join a hybrid, permanent role focused on protecting a cloud-native platform used across markets, collaborating with engineering to

Qualifications

• 4+ years in cloud security, DevSecOps, infrastructure security, or related role.
• Experience with AWS, Azure or GCP security services.
• Knowledge of IAM and access controls.
• Practical knowledge of Terraform or other IaC tools.
• Experience securing containers and Kubernetes environments.
• Understanding of cloud networking, encryption, secrets management and logging.
• Experience integrating security controls into CI/CD pipelines.
• Knowledge of vulnerability management and incident response.
• Familiarity with ISO 27001, SOC 2, or PCI DSS.
• Ability to explain risks and remediation options to engineering teams.
• Professional English language proficiency.

Responsibilities

• Reviewing and improving security controls across AWS cloud environments.
• Implementing security requirements through Terraform and automated policies.
• Managing identity, access controls, permissions, and privileged access.
• Improving container and Kubernetes security across production environments.
• Integrating security checks into CI/CD pipelines.
• Identifying vulnerabilities across infrastructure, applications, and third-party dependencies.
• Working with engineering teams to prioritise and remediate security findings.
• Improving secrets management and encryption practices.
• Monitoring cloud activity and investigating suspicious behaviour.
• Supporting incident response and documenting corrective actions.
• Contributing to threat modelling for new services and architecture changes.
• Maintaining evidence and technical controls required for audits and compliance reviews.

Skills

Cloud security

IAM management

Threat modelling

Incident response

CI/CD security

Vulnerability management

Regulatory standards

Professional English

Tools

Terraform

Kubernetes

AWS

Azure

GCP

Job description

Secure a cloud platform used across multiple markets, without turning security into a barrier to engineering delivery.

Cloud Security Engineer - London

London, United Kingdom · Permanent · Hybrid

What you'd actually work on

• Reviewing and improving security controls across AWS cloud environments
• Implementing security requirements through Terraform and automated policies
• Managing identity, access controls, permissions, and privileged access
• Improving container and Kubernetes security across production environments
• Integrating security checks into CI/CD pipelines
• Identifying vulnerabilities across infrastructure, applications, and third-party dependencies
• Working with engineering teams to prioritise and remediate security findings
• Improving secrets management and encryption practices
• Monitoring cloud activity and investigating suspicious behaviour
• Supporting incident response and documenting corrective actions
• Contributing to threat modelling for new services and architecture changes
• Maintaining evidence and technical controls required for audits and compliance reviews

Where it gets technically interesting

• Managing access across multiple cloud accounts, environments, and engineering teams
• Securing Kubernetes without preventing teams from operating their services
• Detecting configuration drift in infrastructure managed through code
• Separating useful security signals from high volumes of automated findings
• Applying consistent controls without assuming every service has the same risk profile
• Supporting regulatory requirements across a platform that continues to change
• Automating repetitive security controls while retaining clear traceability

What we're looking for

• 4+ years of experience in cloud security, DevSecOps, infrastructure security, or a related role
• Strong knowledge of AWS, Azure, or GCP security services
• Experience with identity and access management
• Practical knowledge of Terraform or another infrastructure-as-code tool
• Experience securing containers and Kubernetes environments
• Understanding of cloud networking, encryption, secrets management, and logging
• Experience integrating security controls into CI/CD pipelines
• Knowledge of vulnerability management and incident response
• Familiarity with standards such as ISO 27001, SOC 2, or PCI DSS
• Ability to explain risks and remediation options to engineering teams
• Professional English

The company

A regulated financial technology company operating across the United Kingdom and Europe. The engineering organisation manages a cloud-native platform supporting high transaction volumes and sensitive customer data.

• Private health cover
• pension contribution
• equity plan
• flexible working

Languages: Professional or native English.