Cloud Security Engineer: Secure SDLC & Vulnerability Mgmt

BPP Holdings Limited; Greater London; Hybrid; GBP 55,000 - 85,000; Full time

Job summary

BPP Holdings Limited is seeking an experienced Security Engineer to join the Product & Technology team in London. You will drive vulnerability management, secure coding practices and cloud security across cloud-native and hybrid environments.

In this role you will work with Platform, Engineering and Product teams, perform secure code reviews, apply security controls in CI/CD, and coordinate remediation efforts, while maintaining strong cross-functional communication.

Qualifications

• 2–5 years of experience in cloud or application security.
• Familiarity with common vulnerabilities and security tools.
• Experience with secure SDLC practices and CI/CD security.
• Hands-on experience with IAM tools and practices.
• Knowledge of cloud platforms (AWS preferred).

Responsibilities

• Secure Coding: perform secure code reviews and advise on secure coding standards.
• Cloud Security: configure secure settings across Cloud Infrastructure and monitor compliance.
• Vulnerability Management: conduct regular assessments and prioritize remediation.
• Communication & Collaboration: work with Platform, IT and Compliance teams and lead knowledge-sharing sessions.

Skills

Cloud security

Secure SDLC

Vulnerability management

IAM

Communication

Job description

BPP Holdings Limited is seeking an experienced Security Engineer to join the Product & Technology team in London. You will drive vulnerability management, secure coding practices and cloud security across cloud-native and hybrid environments.

In this role you will work with Platform, Engineering and Product teams, perform secure code reviews, apply security controls in CI/CD, and coordinate remediation efforts, while maintaining strong cross-functional communication.