Cloud Security Platform Engineer - Secure by Default

Flo; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

ESOP

Parental leave

Learning budget

Flexible work

Job summary

Flo is seeking a Cloud Security Engineer to join Velocity, our Internal Platform team. You will embed security into the core stack and automate security across CI/CD, infrastructure, and container lifecycles to enable fast, trusted shipping.

We value 7+ years in security roles, deep AWS knowledge, Kubernetes security, and experience with security monitoring and policy-as-code. This hybrid role offers flexible work with London office presence and an ESOP program.

Qualifications

• 7+ years in Infrastructure Security, Cloud Security, or Security Engineering roles.
• Proven experience securing AWS environments and cloud-native tools.
• Strong knowledge of security monitoring, incident response and IAM concepts.
• Experience with IaC and security automation across pipelines.

Responsibilities

• Embed security into the platform and core stack, making security invisible to developers.
• Automate security across CI/CD pipelines, infrastructure, and container lifecycles.
• Own and strengthen Flo’s AWS security posture using GuardDuty, Inspector, Security Hub, and SSM Patch Manager.
• Harden container image security end-to-end and enforce policies at admission with Kyverno/Checkov.
• Practice policy as code to ensure standards are enforced programmatically.
• Build security observability and metrics with Databricks or Looker.
• Support privacy features and security culture across teams.

Skills

Cloud security

Security as code

Zero Trust

Security monitoring

AWS security

Kubernetes security

Infra security

SIEM

Tools

Terraform

Terragrunt

Cosign

Sigstore

Kyverno

Checkov

GuardDuty

Inspector

Security Hub

SSM Patch Manager

Job description

Flo is seeking a Cloud Security Engineer to join Velocity, our Internal Platform team. You will embed security into the core stack and automate security across CI/CD, infrastructure, and container lifecycles to enable fast, trusted shipping.

We value 7+ years in security roles, deep AWS knowledge, Kubernetes security, and experience with security monitoring and policy-as-code. This hybrid role offers flexible work with London office presence and an ESOP program.