Cyber Security Engineering Manager

167 Solutions; Greater London; Hybrid; GBP 130,000 - 160,000; Full time

Job summary

167 Solutions is partnering with a global technology-driven organisation to recruit a Cyber Security Manager who will own security across cloud, product, infrastructure and AI security. The role requires hands-on engineering capability, influencing security architecture and governance across AWS-hosted environments and digital platforms.

You will lead security across cloud, applications and AI services, working with senior leadership to translate strategy into practical engineering outcomes and

Qualifications

• Extensive cyber security leadership & hands-on security engineering experience.
• Strong AWS security engineering expertise in large-scale environments.
• Experience securing high-traffic B2B/B2C platforms and cloud infrastructure.

Responsibilities

• Lead security architecture, engineering and governance across cloud, product, infrastructure and AI security.
• Own secure-by-design product security across APIs, services and applications.
• Implement DevSecOps across CI/CD pipelines and secure software supply chains.
• Drive risk management, vulnerability remediation and incident response at scale.
• Establish security controls for AI/Generative AI platforms and governance frameworks.

Skills

AWS security engineering

Security architecture

DevSecOps

Governance & ISO 27001

Threat modelling

Tools

AWS

Terraform

CloudFormation

Kubernetes

Python

Job description

Cyber Security Manager – Cloud, Product, Infrastructure & AI Security

Location: London – Hybrid Working

Salary: £130,000 – £160,000 per annum

Employment Type: Permanent

Recruitment Partner: 167 Solutions

Secure Technology at Global Scale

167 Solutions is partnering with a global, technology-driven organisation to recruit an experienced Cyber Security Manager who can combine strategic security leadership with hands‑on engineering expertise.

This is an opportunity to take ownership of security across complex, high‑availability digital platforms operating at global scale, supporting high‑traffic B2B and B2C environments.

We are looking for someone who understands security beyond policies and compliance. You will be technically credible, comfortable working directly with engineering teams, and capable of designing, implementing and governing security across cloud infrastructure, digital products, applications, data and emerging AI technologies.

The successful candidate will bring a strong background in AWS cloud security, product security, infrastructure security, AI security, enterprise architecture and regulatory governance, with the ability to translate security strategy into practical engineering outcomes.

The Opportunity

You will lead and influence security architecture, engineering and governance across a modern technology estate, working closely with senior technology leadership, engineering, product, platform and infrastructure teams.

Cloud & Infrastructure Security

• Own and develop security architecture across large‑scale, AWS‑hosted cloud environments.
• Design and implement secure, resilient and scalable cloud infrastructure using AWS‑native security services.
• Lead security engineering across networking, compute, containers, serverless applications, databases and distributed systems.
• Implement and optimise AWS IAM, AWS Organizations, Control Tower, Security Hub, GuardDuty, CloudTrail, Config, Inspector, KMS, WAF and Shield.
• Drive Zero Trust architecture, identity governance, privileged access management and least‑privilege security controls.
• Secure infrastructure‑as‑code environments using Terraform, CloudFormation and automated policy enforcement.
• Develop security monitoring, vulnerability management, detection and incident response capabilities.
• Strengthen cloud resilience, disaster recovery and business continuity controls.

Product & Application Security

• Embed security throughout the software development lifecycle, enabling secure‑by‑design product engineering.
• Own application, API, web and mobile security across high‑volume consumer and enterprise platforms.
• Lead threat modelling, architecture reviews, security testing and vulnerability remediation.
• Establish DevSecOps practices across CI/CD pipelines, automated security testing and software supply‑chain protection.
• Implement SAST, DAST, SCA, container security, secrets scanning and dependency management.
• Apply OWASP Top 10, OWASP ASVS and secure coding standards.
• Collaborate with product and engineering teams to balance innovation, user experience, performance and security.

AI Security & Emerging Technology

• Develop security controls and governance for AI, Generative AI, LLMs and agentic AI applications.
• Assess security risks associated with AI platforms, models, data pipelines, RAG architectures and third‑party AI integrations.
• Address threats including prompt injection, data leakage, model manipulation, adversarial attacks and insecure AI agents.
• Establish secure AI development and deployment practices, including model access controls, monitoring and lifecycle governance.
• Support security architecture for AI services, including AWS Bedrock, SageMaker and associated cloud‑native capabilities.
• Align AI security with emerging governance frameworks, responsible AI principles and applicable regulatory obligations.
• Partner with engineering and data teams to ensure AI adoption is secure, scalable and commercially viable.

Security Architecture, Governance & Regulation

• Develop and maintain enterprise security architecture aligned with TOGAF principles and established security architecture frameworks.
• Own and continuously improve security policies, technical standards, control frameworks and risk management processes.
• Lead security governance aligned with ISO 27001, ISO 27002, ISO 27017, ISO 27018 and ISO 42001.
• Apply NIST Cybersecurity Framework, NIST AI Risk Management Framework, CIS Controls and relevant industry security standards.
• Ensure alignment with applicable UK GDPR, Data Protection Act, EU AI Act, DORA, NIS2 and other relevant regulatory requirements.
• Support security audits, assurance programmes, third‑party risk reviews and certification activities.
• Establish measurable security KPIs, risk reporting and assurance processes for senior stakeholders.
• Provide security leadership across global, multi‑team technology programmes.

What We’re Looking For

We are interested in speaking with technically strong security leaders who have experience operating in complex, cloud‑first engineering organisations.

Essential Experience

• Extensive experience in cyber security engineering, security architecture or technical security leadership.
• Strong hands‑on AWS security engineering expertise, ideally across large‑scale production environments.
• Proven experience securing high‑traffic B2B and B2C digital products or platforms.
• Strong knowledge of cloud infrastructure, networking, IAM, application security and distributed architectures.
• Practical experience implementing security controls through engineering rather than relying solely on governance processes.
• Strong understanding of DevSecOps, CI/CD security, infrastructure‑as‑code and automated security testing.
• Experience designing security controls for AI or emerging technology platforms, with knowledge of associated risks.
• Experience working within ISO‑aligned governance and enterprise architecture frameworks, including TOGAF.
• Ability to lead technical security initiatives and influence software engineering, infrastructure and product teams.
• Experience managing security risk, vulnerabilities, incidents and remediation at enterprise scale.
• Strong stakeholder management skills, with the ability to communicate technical risks to senior leadership.

Desirable Experience

• AWS Certified Security – Specialty, AWS Solutions Architect Professional or equivalent cloud security expertise.
• CISSP, CCSP, CISM, SABSA or relevant security architecture certifications.
• TOGAF certification or experience operating within TOGAF‑aligned architecture environments.
• ISO 27001 Lead Implementer or Lead Auditor experience.
• Familiarity with Kubernetes, EKS, Docker, Terraform, Python and security automation.
• Experience implementing SIEM, SOAR, threat intelligence and security observability platforms.
• Experience securing Generative AI applications, LLM platforms or agentic AI systems.
• Background in global SaaS, media, publishing, digital commerce, financial technology or high‑volume consumer platforms.

Why Consider This Role?

• £130,000 – £160,000 basic salary.
• London-based hybrid working.
• Opportunity to shape security across globally distributed, high‑traffic technology platforms.
• Broad responsibility spanning cloud, application, infrastructure, product and AI security.
• The chance to influence enterprise security architecture and technical strategy.
• Work closely with senior engineering, architecture, product and technology leadership.
• A role that values hands‑on technical capability as much as strategic thinking.

Interested in Learning More?

We’re particularly interested in speaking with Cyber Security Managers, Principal Security Engineers, Cloud Security Architects, Product Security Leaders and hands‑on Heads of Security ready for a role with significant technical ownership.

If you’re passionate about building secure technology at scale and want to combine engineering leadership with modern cloud and AI security, we’d welcome a confidential discussion.

167 Solutions – Technology, Talent & Transformation.

Specialists in Technology, AI, Cloud and Executive Recruitment.

#CyberSecurityJobs #CyberSecurityManager #CloudSecurity #AWSSecurity #ProductSecurity #AISecurity #SecurityArchitecture #DevSecOps #TOGAF #ISO27001 #ISO42001 #CyberSecurityLeadership #LondonTechJobs #167Solutions