Lead Cybersecurity Engineer

Explore Group; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Explore Group is seeking a Lead Cybersecurity Engineer to strengthen cloud infrastructure security, protect corporate IT, and secure software delivery in a regulated fintech context. The role is hands-on and collaborates with the Head of IT Infrastructure to translate security strategy into scalable, automated controls.

The role emphasizes cloud security, IAM, endpoint protection and automated security tooling, with a focus on compliance and secure-by-design practices across engineering teams.

Qualifications

• Experience in cloud security engineering across GCP or similar
• Strong understanding of IAM, passwordless and MFA
• Knowledge of SOC 2/ISO 27001 controls and audits

Responsibilities

• Lead cloud and infrastructure security across GCP and CI/CD pipelines.
• Embed security by design into application development and deployment processes.
• Drive identity, access management and endpoint security improvements.
• Support compliance, audits and governance requirements.

Skills

Cloud security

Security architecture

Threat modelling

CI/CD security

Zero Trust

Education

Cybersecurity/CS degree

Certifications (CISSP/CISM)

Tools

Terraform

Google Cloud Platform (GCP)

Security Command Center

MDR/EDR

Job description

A fast growing fintech is looking for a Lead Cybersecurity Engineer to strengthen the security of its cloud infrastructure, corporate IT environment and software delivery processes.

The business builds technology for the UK wealth management industry, helping financial advisers and their clients access modern digital investment solutions.

This is a hands on technical role working closely with the Head of IT Infrastructure to translate security strategy into practical, scalable and automated security controls.

You will take ownership of improving cloud security, identity and access management, endpoint protection and security automation, while helping ensure the platform meets relevant regulatory and compliance requirements.

This is an opportunity to make a tangible impact within a growing technology business, shaping security practices and embedding secure by design principles across its infrastructure and engineering teams.

Key Responsibilities

Cloud and Infrastructure Security

• Implement and maintain cloud security controls across Google Cloud Platform (GCP).
• Improve cloud security architecture across identity, networking, data protection and workload security.
• Configure and manage GCP security capabilities, including IAM, VPC Service Controls, Identity Aware Proxy and Security Command Center.
• Integrate security controls into CI/CD pipelines, including infrastructure as code validation, vulnerability scanning, secret detection and compliance checks.
• Develop and maintain infrastructure as code using Terraform.
• Work with engineering teams to embed security by design into application development and deployment processes.
• Conduct security architecture reviews, threat modelling and technical risk assessments.
• Improve cloud security monitoring, threat detection and automated remediation.

Identity and Endpoint Security

• Secure and manage Microsoft 365, Entra ID and Intune environments.
• Implement and improve MFA, Conditional Access, Privileged Identity Management, device compliance and least privilege access controls.
• Drive the adoption of Zero Trust principles across cloud infrastructure, corporate systems, endpoints and identity platforms.
• Support and optimise managed detection and response (MDR) and endpoint detection and response (EDR) technologies.
• Improve email security, phishing protection and user security awareness.

Security Operations and Incident Response

• Manage vulnerability identification, prioritisation and remediation across cloud infrastructure, servers and endpoints.
• Improve vulnerability management processes and security monitoring.
• Act as a technical escalation point during security incidents, supporting investigation and remediation.

Compliance and Governance

• Support cybersecurity certification, compliance and audit requirements, including SOC 2 and ISO 27001.
• Provide technical evidence for audits and demonstrate the effectiveness of implemented security controls.
• Ensure security controls align with regulatory requirements and internal policies.

Skills and Experience

• 5 to 8+ years of experience in cloud security engineering, infrastructure security or a closely related technical security role.
• Strong understanding of cloud, networking and IT infrastructure security.
• Experience implementing identity and access management solutions, including SSO, MFA and privileged access controls.
• Experience with vulnerability management across cloud infrastructure, servers and endpoints.
• Knowledge of Zero Trust principles and cloud security architecture.
• Experience with email security, phishing protection and user security awareness.
• Exposure to endpoint security, MDR/EDR solutions and cloud security monitoring.
• Understanding of SOC 2 and/or ISO 27001 controls, audits and compliance processes.
• Hands on experience securing Google Cloud Platform (GCP).
• Experience with Microsoft 365, Entra ID and Intune security.
• Background in fintech, financial services or another regulated technology environment.
• Exposure to container security, Kubernetes, GKE and Cloud Run.
• Experience with automation using Python, PowerShell or Bash.
• Experience managing infrastructure as code using Terraform.

Qualifications and Certifications

A degree in Cybersecurity, Computer Science, Information Technology or a related discipline is advantageous.

Relevant industry certifications are also desirable, including CISSP, CISM, Google Professional Cloud Security Engineer or equivalent cloud security certifications.

Why Consider This Opportunity?

• Take ownership of security engineering across a growing fintech platform.
• Work closely with senior infrastructure leadership and engineering teams.
• Influence cloud security architecture, automation and identity security.
• Build and improve security controls within a technology driven, regulated environment.
• Play a key role in strengthening security maturity as the business continues to grow.