Developer experience security engineer

Motorway; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Equity scheme

25 days holiday

Flexible working

Medical insurance

Life assurance

Pension scheme

Enhanced family leave

EAP

EV leasing

Cycle to work

Nursery salary sacrifice

Volunteer day

Job summary

Motorway — крупнейшая в Великобритании онлайн-платформа по продаже автомобилей. Мы соединяем продавцов и дилеров с использованием передовых технологий. Ищем специалиста по разработке платформ с фокусом на безопасной по умолчанию архитектуре и автоматизации безопасности.

Работа в гибридном формате в Лондоне, участие в разработке и обеспечении надёжности, внедрении IAM, секретов, монитора и защиты данных. Опыт в AWS и современных методах защиты обязателен.

Qualifications

• Опыт работы как Platform engineer / Developer Experience engineer или аналогичная роль, ориентированная на поддержание инженеров.
• Опыт работы с контейнерами и serverless, IaC.
• Знание AWS cloud security best practices и инструментов безопасности.
• Знание методов secure SDLC, мер безопасности сетей и приложений.
• Знания SIEM, IDS/IPS, WAF и сканеры уязвимостей.
• Понимание MITRE ATT&CK TTPs.
• Отличные навыки решения проблем и коммуникации.
• Желателен опыт в ISO27001, NIST CSF, AWS/GCP Security Certifications.

Responsibilities

• Проектирование, внедрение и сопровождение безопасной по умолчанию платформы (IAM, сетевые примитивы, хранение секретов, защитa рантайма).
• Разработка автоматических проверок безопасности, guardrails и наблюдаемости для снижения ручного аудита.
• Интеграция безопасных практик в CI/CD, шаблоны и общие инструменты (Shift left).
• Автоматизация повторяющихся задач для команд технологий и Security Operations.
• Обеспечение телеметрии, логирования и мониторинга уровня платформы.
• Разработка и реализация общеплатформенных кейсов безопасности (SIEM-детекции, оповещения).
• Работа в виртуальной SOC с командой Security Operations в инцидент-ответе.
• Поддержка актуальных трендов безопасности и обучение по мере необходимости.

Skills

Containers

Serverless

Infrastructure as code

AWS security practices

Security tooling

SIEM

IDS/IPS

WAF

MITRE ATT&CK

Problem solving

Communication

Tools

SIEM

IDS/IPS

WAF

Job description

Описание:

Motorway is the UK's largest online car-selling platform. We connect private sellers directly with over 8,000 dealers nationwide. Our online platform helps sellers achieve great prices for their cars while giving dealers fast, reliable access to the stock they want for their dealerships. Founded in 2017, our award-winning, technology-led approach has redefined the experience of selling a car.

Задачи:

Design, implement, and maintain secure-by-default platform capabilities (e.g. IAM patterns, network primitives, secrets management, runtime protections, encryption) that are easy for product teams to adopt. Build automated security checks, guardrails, and visibility that continuously assess risk and reduce the need for manual security audits. Collaborate with engineering to embed secure software development practices into CI/CD pipelines, templates, and shared tooling (Shift left and Secure by design principles). Reduce manual work (toil) for the technology and Security Operations Team using automation (e.g. scripting, workflows, tooling). Ensure platform-level security telemetry, logging, and monitoring are consistent, high-quality, and provided as a standard capability for all teams. Define and implement platform-wide security use cases (e.g. SIEM detections, alerts, and signals) that scale across teams without bespoke configuration Work as part of a virtual SOC with the Security Operations Team to support in security incident response. Stay up-to-date with the latest security trends and best practices. Enable secure engineering practices through documentation, examples, platform defaults, and targeted training where appropriate. Help translate security policies and standards into practical, enforceable platform patterns and guardrails.

Требования:

Proven experience as a Platform engineer, Developer Experience engineer, or similar role focused on enabling other engineers. Proven experience working with Containers and serverless with Infrastructure as code. Good knowledge of AWS cloud security best practices and tooling Technical knowledge of best practice security for networks, systems, web applications, APIs and databases. Good understanding of secure software development practices. Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs). Excellent problem-solving and analytical skills. Strong communication and collaboration abilities Будет плюсом: Knowledge of security standards and frameworks (e.g. ISO27001, NIST CSF, AWS FSBP) is beneficial; Relevant security certifications (e.g. GCLD, Security+, AWS/GCP Security Certifications) are a plus

Условия:

• Competitive salary
• Equity scheme - we all share in Motorway’s success
• 25 days holiday
• Flexible working (2 days a week in our London office, with socials and snacks galore)
• Private medical insurance via BUPA
• Life assurance
• Pension scheme (we contribute 5%)
• Enhanced family leave (e.g. 26 weeks full pay for maternity or adoption)
• 24/7 Employee Assistance Programme
• EV leasing scheme
• Cycle to work scheme
• Nursery salary sacrifice scheme
• 1 paid volunteering day a year