Platform Security Engineer

Gear4music Ltd; Manchester; On-site; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Health Assured Employee Assistance

Flexible hours

Laptop provided (Mac/Linux/Windows)

Learning budget & external training

Cycle to work scheme

Company pension

Job summary

Gear4music Ltd is hiring a skilled security engineer to build secure, scalable systems across our UK and European platform. You will champion secure-by-design practices, threat modelling, and automated controls to protect our rapidly growing music retail platform.

Join a collaborative team focused on CI/CD automation, secure cloud environments, and proactive security education for engineers. A flexible, supportive culture and a strong emphasis on ongoing learning are offered.

Qualifications

• Experience implementing secure SDLC and threat modelling.
• Familiarity with CI/CD and secure build pipelines (GitHub Actions).
• Experience with cloud security, IAM, monitoring and observability.

Responsibilities

• Design and implement security controls across platforms and services.
• Conduct threat modelling and risk assessments for new features.
• Automate security controls and improve IAM, access management and incident response.
• Collaborate with engineering teams to embed security into DevOps practices.

Skills

DevSecOps

IAM

CI/CD

Cloud security

Monitoring

Tools

GitHub Actions

GCP security

Job description

Gear4music is a leading UK & European musical retailer. Having launched in 2003 with a mission to offer a range of easy and affordable musical gear to musicians. We offer over 63,000 products in 190 countries, 15 languages and 9 currencies. In 2022, AV.com launched under the Gear4music umbrella, focussing on retailing Home Cinema, HiFi and accessories. Gear4music is powered by a technical team of over 40 people who build and maintain a platform that makes achieving our mission possible. We recently turned over £152m as a group with consistent revenue growth since listing on the AIM. Who Are You? You are a motivated, flexible and talented engineer who is enthusiastic about learning new things and challenging themselves. You're not a lone ranger but believe in a joined up and friendly work environment that delivers real projects, working collaboratively excites you. You're someone who takes pride in the things you do and likes to see things from beginning to end. You love the attention to detail and might admit it's a blessing and a curse. You will champion new technologies when it's right for the business. You'll also need some personality, a strong GIF-game, and we'd love to know what you're into.. to an extent. Your Mission To work alongside like-minded people across our software engineering, architecture, infrastructure and testing teams. To be passionate about building security into everything we do; whether that's threat modelling, hardening cloud environments, improving IAM, automating controls, or documenting best practice (or all of the above). To set high standards for yourself and the work you deliver, helping us create a secure, stable and trusted platform, enabling:

• Secure-by-design applications and services
• Safe, reliable and automated releases (working towards full CI/CD)
• Strong detection, response and observability
• A culture where security is shared, understood and championed

Your Stack

• Google Cloud security fundamentals: IAM, VPC design, Cloud Armor, Secrets, KMS
• Experience mitigating real-world security threats and vulnerabilities
• Understanding of DevSecOps best practice and secure SDLC
• Familiarity with CI/CD systems such as GitHub Actions and securing build pipelines
• Monitoring & alerting: Prometheus, Grafana, GCP Monitoring, SIEM concepts

Nice to Have

• Experience with web servers & proxies: Apache, Nginx, Traefik, HAProxy
• Exposure to databases such as MySQL, MongoDB, Firebase, Elastic, Redis
• Network & request tracing including HTTP/1-3 and gRPC
• Experience running security workshops, threat modelling sessions or training

Soft and Fluffy Description of Skills

• Able to plan and manage your workload across multiple projects and priorities
• Comfortable collaborating, influencing and sharing knowledge with other teams
• Passionate about secure, scalable and complex distributed systems
• Confident communicating security concepts to both technical and non-technical peopleMotivated to push security forward across the business, not just maintain it

Don't worry if you can't tick all of these boxes! If you did, you might be exaggerating. We'd like to hear from you if this sounds like the kind of tech stack you're used to working with.

What We Will Offer

• Great pay - and it's always on time.
• No expectation of long hours. We respect your time.
• A personal development plan and regular 1:1s.
• Your choice of Mac, Linux or Windows Laptop
• Health Assured Employee Assistance Programme.
• Flexible hours and no dress code.
• Mental health first aiders.
• A strong learning culture with support for external training.

And the usual good stuff:

• Cycle to work scheme.
• Company pension scheme.

We are an equal opportunities employer and welcome applications from all suitably qualified candidates, regardless of age, disability, gender reassignment, marriage or civil partnership status, pregnancy or maternity, race, religion or belief, sex, or sexual orientation, in line with the Equality Act 2010. If you require any reasonable adjustments as part of the recruitment process, please let us know. A member of our friendly recruitment team will contact you to discuss your needs in more detail and ensure appropriate arrangements are made.

You are a motivated, flexible and talented engineer who is enthusiastic about learning new things and challenging themselves. You're not a lone ranger but believe in a joined up and friendly work environment that delivers real projects, working collaboratively excites you. You're someone who takes pride in the things you do and likes to see things from beginning to end. You love the attention to detail and might admit it's a blessing and a curse. You will champion new technologies when it's right for the business. You'll also need some personality, a strong GIF-game, and we'd love to know what you're into.. to an extent.

• Google Cloud security fundamentals: IAM, VPC design, Cloud Armor, Secrets, KMS
• Experience mitigating real-world security threats and vulnerabilities
• Understanding of DevSecOps best practice and secure SDLC
• Familiarity with CI/CD systems such as GitHub Actions and securing build pipelines
• Monitoring & alerting: Prometheus, Grafana, GCP Monitoring, SIEM concepts, Experience with web servers & proxies: Apache, Nginx, Traefik, HAProxy
• Exposure to databases such as MySQL, MongoDB, Firebase, Elastic, Redis
• Network & request tracing including HTTP/1-3 and gRPC
• Experience running security workshops, threat modelling sessions or training, Able to plan and manage your workload across multiple projects and priorities
• Comfortable collaborating, influencing and sharing knowledge with other teams
• Passionate about secure, scalable and complex distributed systems
• Confident communicating security concepts to both technical and non-technical people
• Motivated to push security forward across the business, not just maintain itGear4music is a leading UK & European musical retailer. Having launched in 2003 with a mission to offer a range of easy and affordable musical gear to musicians. We offer over 63,000 products in 190 countries, 15 languages and 9 currencies. In 2022, AV.com launched under the Gear4music umbrella, focussing on retailing Home Cinema, HiFi and accessories.

Gear4music is powered by a technical team of over 40 people who build and maintain a platform that makes achieving our mission possible. We recently turned over £152m as a group with consistent revenue growth since listing on the AIM.

Because we care about YOU. We pride ourselves on our culture, offering more than gimmicky branded merch and a PS5 you don't have time to play.