Infrastructure Security Engineer - Remote

YO IT Consulting; United Kingdom; On-site; GBP 70,000 - 100,000; Full time

Job summary

A tech consulting firm is looking for a Sr. Infrastructure Security Engineer to develop and enhance security systems across AWS, GCP, and Azure. This remote role requires expertise in cloud security and automation, with responsibilities including architecting security systems, building automated guardrails, and designing Zero Trust models. Candidates should have strong programming skills and experience with Infrastructure as Code. The ideal applicant thrives in a fast-paced environment and has a mindset focused on engineering solutions to security challenges.

Qualifications

• Deep experience securing distributed, multi-cloud systems (AWS, GCP, Azure).
• Strong programming ability with a focus on automation and systems thinking.
• Experience with Infrastructure as Code and CI/CD pipeline security integration.

Responsibilities

• Architect security systems that scale with product iteration.
• Build automated guardrails and self-healing infrastructure.
• Design Zero Trust primitives and Detection-as-Code pipelines.

Skills

Securing distributed multi-cloud systems

Programming (Python, Go, Rust)

Infrastructure as Code (Terraform, Pulumi)

Understanding of identity systems and Zero Trust

Familiarity with detection ecosystems

Job description

Job Title: Sr. Infrastructure Security Engineer

Job Type: Full-Time

Location: Remote

The Role

We’re looking for an infrastructure security engineer who thinks like a builder, not an auditor. You’ll design and evolve the security foundations of a fast-moving, AI-native organization—where the goal isn’t just to reduce risk, but to enable us to move faster safely.

This role sits at the intersection of systems engineering, security research, and applied automation.

What You’ll Do

• Architect security systems across AWS, GCP, and Azure that scale with rapid product iteration.
• Build automated guardrails and self-healing infrastructure to eliminate entire classes of vulnerabilities.
• Design and implement Zero Trust primitives—identity, access, and policy as code—from first principles.
• Develop Detection-as-Code pipelines, treating detection logic like production systems (versioned, tested, deployable).
• Explore and deploy AI-native approaches to threat modeling, anomaly detection, and incident response.
• Partner closely with engineering and research teams to embed security into the development lifecycle.
• Write clearly and think clearly—security decisions should be legible, reviewable, and composable.
• Continuously rethink assumptions and evolve our security posture as new threats and paradigms emerge.

What We’re Looking For

• Deep experience securing distributed, multi-cloud systems (AWS, GCP, Azure).
• Strong programming ability (Python, Go, Rust, or similar) with a bias toward automation and systems thinking.
• Experience with Infrastructure as Code (Terraform, Pulumi, etc.) and integrating security into CI/CD pipelines.
• Strong understanding of identity systems, least privilege, and Zero Trust architectures.
• Familiarity with modern detection ecosystems (e.g., Sigma, Panther, GuardDuty, SCC) and signal quality challenges.
• A mindset that treats security as an engineering and systems problem—not compliance.
• Comfort working in a highly asynchronous, writing-heavy, and fast-paced environment.

Nice to Have

• Experience securing Kubernetes and containerized workloads at scale.
• Contributions to open-source security tools or research.
• Experience applying or experimenting with AI/ML in security contexts.
• Strong opinions about how security should evolve in an AI-first world.