Cloud Security Engineer: Harden AWS CI/CD & Data Safety

Gremlin LTD.; United Kingdom; Remote; GBP 65,000 - 90,000; Full time

Job summary

Gremlin LTD. is seeking a security engineer who cares about keeping things locked down. You’ll work across AWS environments, CI/CD pipelines, and application security for clients, identifying misconfigurations before they become issues.

The role emphasizes hands-on security, not compliance theatre, with responsibilities including implementing controls in AWS, scanning in CI/CD, reviewing IaC, and supporting Cyber Essentials and ISO 27001 alignment. Join a pragmatic, secure-by-default team.

Qualifications

• 2+ years of security engineering or DevSecOps experience.
• Knowledge of AWS security fundamentals (IAM, Security Groups, KMS, CloudTrail).
• Experience with vulnerability scanning tools (Trivy, Snyk, or similar).
• Understanding of network security (firewalls, TLS, VPNs).
• Familiarity with at least one scripting language (Python, Bash, or Go).

Responsibilities

• Implement security controls across AWS environments
• Configure and manage security scanning tools in CI/CD pipelines
• Review infrastructure as code for security misconfigurations
• Support clients with Cyber Essentials and compliance requirements
• Monitor and respond to security alerts and incidents
• Write security documentation and policies
• Contribute to internal security standards and playbooks

Skills

Security engineering

DevSecOps

AWS IAM

Vulnerability scanning

Network security

Scripting (Python/Bash/Go)

Tools

Trivy

Snyk

CI/CD security tooling

Job description

Gremlin LTD. is seeking a security engineer who cares about keeping things locked down. You’ll work across AWS environments, CI/CD pipelines, and application security for clients, identifying misconfigurations before they become issues.

The role emphasizes hands-on security, not compliance theatre, with responsibilities including implementing controls in AWS, scanning in CI/CD, reviewing IaC, and supporting Cyber Essentials and ISO 27001 alignment. Join a pragmatic, secure-by-default team.