Principal Security Engineer – Cloud & Kubernetes

Iceberg; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Iceberg, a leading investment firm in London, is hiring a Principal Security Engineer to shape security across cloud and Kubernetes environments.

You will bridge security architecture and engineering, identify risks, and design guardrails that engineers can implement. Deep expertise in either cloud or Kubernetes is valuable, with broader exposure welcomed.

Collaborate with platform and software teams, influence design decisions, and contribute to threat modelling and secure delivery.

Qualifications

• Experience designing security controls for cloud and container environments.
• Ability to influence engineering decisions and balance security with delivery.
• Experience with threat modelling and security design reviews.
• Hands-on with IaC and policy-as-code implementations.

Responsibilities

• Identify risks in cloud/Kubernetes environments and design practical guardrails.
• Collaborate with platform, infrastructure, and software engineers to implement controls.
• Challenge technical decisions and shape secure architectural patterns.

Skills

Cloud security

Kubernetes security

Threat modelling

Security design reviews

Infrastructure-as-Code

Policy-as-code

CI/CD security

Job description

I’m working with a leading investment firm in London looking to hire a Principal Security Engineer to help shape how security is designed across its cloud and Kubernetes environments.

This is a senior technical role sitting between security architecture and engineering.

They’re looking for someone who can look at a cloud or Kubernetes environment, identify the risks, design practical security guardrails and then work closely with engineering teams to bring those controls to life.

You don’t need to be an expert in both Cloud and Kubernetes. Deep experience in either area is of interest; if you have both, even better.

Your background could include:

• AWS, GCP or Azure security
• Kubernetes and container security
• Cloud IAM, networking, encryption and secrets management
• Infrastructure-as-Code and policy-as-code
• Automated security guardrails
• CI/CD and software supply-chain security
• Threat modelling and security design reviews
• Working closely with platform, infrastructure and software engineering teams

The important thing is that you understand modern engineering environments well enough to identify risk, challenge technical decisions and design security controls that engineers can actually implement.

This isn't a role where you'll simply write security standards and hand them over. You'll work directly with some exceptionally strong engineers and have real influence over how platforms and applications are designed and secured.

At the same time, you don't need to be a hardcore software developer. If you do come from a particularly hands-on engineering background, there will be scope to get involved in implementation as well.

They have a high technical and academic bar and are particularly interested in people who have worked within complex, engineering-led environments.

If you're a senior security engineer who's increasingly finding yourself designing the solution rather than simply implementing it, I'd be interested in speaking.