Hybrid AWS Security Engineer: App & Cloud Defender

The Financial Times; Greater London; Hybrid; GBP 62,000 - 88,000; Full time

Benefits offered by this job

Hybrid work model

Medical cover

Generous annual leave

Job summary

The Financial Times is seeking a Senior Cyber Security Engineer to mature our application and cloud security across a cloud-native, AWS-hosted estate. The role focuses half on application security and half on cloud security, working closely with product, platform, and engineering teams to make secure delivery easier by default.

Candidates will drive practical security improvements, build automation, and contribute to secure architecture decisions.

Qualifications

• Strong practical experience in application security and cloud security.
• Hands-on AWS security experience with misconfiguration remediation.
• Experience improving vulnerability management across engineering teams.
• Experience in improving cloud/IaC misconfiguration management at scale.
• Experience integrating/tuning security tooling in CI/CD workflows.
• Experience running threat-modelling sessions that influence design decisions.
• Ability to write Python scripts to automate security workflows.
• Strong communication and collaboration skills to influence engineers and leaders.

Responsibilities

• Tune and evolve SAST, SCA, secret scanning to be actionable with low noise.
• Improve AWS and IaC guardrails by reducing misconfigurations at scale.
• Drive vulnerability management across findings, prioritisation and remediation.
• Support secure architecture decisions with input into design reviews and AWS decisions.
• Embed security into design, delivery and operations with engineering teams.
• Mentor security engineers and potentially line-manage team members.

Skills

Strong communication

Threat modelling

Automation scripting

Security in CI/CD

Security tooling

Interpersonal influence

Tools

AWS

Python

SAST

Software composition analysis

Terraform

CloudFormation

Splunk

GitHub

Job description

The Financial Times is seeking a Senior Cyber Security Engineer to mature our application and cloud security across a cloud-native, AWS-hosted estate. The role focuses half on application security and half on cloud security, working closely with product, platform, and engineering teams to make secure delivery easier by default.

Candidates will drive practical security improvements, build automation, and contribute to secure architecture decisions.