Security Engineer

beqom; City Of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A B2B SaaS company is seeking an experienced Security Engineer to enhance security across cloud environments and applications. Responsibilities include implementing security controls, conducting risk assessments, and managing vulnerabilities. The ideal candidate has 3-5+ years of cybersecurity experience, strong knowledge of cloud security (AWS/Azure), and excellent communication skills. This role offers a progressive work environment focused on meaningful impacts.

Benefits

Dynamic work environment

Opportunities for meaningful change

Collaborative global team

Qualifications

• 3-5+ years of experience in Cybersecurity Engineering, focusing on Cloud and Infrastructure Security.
• Hands-on experience with AWS, Azure, and security tools.
• Solid knowledge of web application security and OWASP Top 10.

Responsibilities

• Design, implement, and maintain cloud and infrastructure security controls.
• Conduct security reviews and risk assessments.
• Lead vulnerability management activities.

Skills

Cloud and Infrastructure Security

Cybersecurity Engineering

Web Application Security

Incident Response

Vulnerability Management

Secure Coding Practices

Communication Skills

Tools

AWS

Azure

Docker

Kubernetes

GitHub Actions

GitLab CI

Job description

Join beqom - where tech meets impact

beqom is a high-growth B2B SaaS company that provides industry-leading tools for pay equity and transparency, compensation, and performance management.

Trusted by some of the world's most respected companies, beqom enables HR and business leaders to navigate global compliance and make smarter pay decisions that attract, retain, and motivate top talent.

Founded in Switzerland and serving clients worldwide, our powerful, enterprise-ready products are fueled by beqom pay intelligence.

The Role

We are seeking an experienced Security Engineer with strong expertise in cloud and infrastructure security, combined with a solid understanding of web application security principles. The ideal candidate will play a key role in strengthening beqom's security posture across cloud environments, infrastructure, and application layers.

You will collaborate closely with engineering, DevOps, and product teams to identify and mitigate security risks, perform secure code reviews, and manage vulnerabilities throughout the software development lifecycle (SDLC).

What will you be doing?

• Design, implement, and maintain cloud and infrastructure security controls (e.g., IAM, network segmentation, encryption, logging, monitoring).
• Conduct security reviews and risk assessments for new and existing systems, architectures, and cloud deployments.
• Lead vulnerability management activities, including triaging, tracking, and remediation of findings from SAST, DAST, and SCA tools.
• Perform or support secure code reviews and assist developers in remediating security vulnerabilities.
• Provide expertise on OWASP Top 10 vulnerabilities, common exploitation techniques, and secure coding best practices.
• Support incident response and security investigations related to infrastructure, cloud, or application environments.
• Collaborate with DevOps and Engineering, Compliance teams to embed security automation in CI/CD pipelines.
• Maintain and improve security monitoring, detection, and alerting capabilities across cloud platforms (e.g., AWS, Azure).
• Contribute to security documentation, standards, and playbooks.
• Support compliance and audit activities (e.g., ISO 27001, SOC 2) by providing technical evidence and control validation.

What are we looking for?

• 3-5+ years of experience in Cybersecurity Engineering, with a focus on Cloud and Infrastructure Security.
• Hands‑on experience with AWS, Azure, security tools and controls.
• Strong understanding of network security, identity and access management, encryption, and container security (e.g., Docker, Kubernetes).
• Experience with vulnerability management tools.
• Solid knowledge of web application security and the OWASP Top 10.
• Experience with secure code reviews, threat modelling, and secure SDLC practices.
• Familiarity with security automation in CI/CD pipelines (GitHub Actions, GitLab CI).
• Working knowledge of incident response, forensics, or SIEM tools
• Strong understanding of ISO 27001, SOC 2, or similar frameworks.
• Excellent communication and collaboration skills.

Bonus points if you have:

• Relevant certifications such as CISSP, CCSP, OSCP, CEH.
• Experience in threat modeling and security architecture design.
• Knowledge of DevSecOps principles and Infrastructure as Code (IaC) scanning (Terraform, CloudFormation).

Why join us?

• Your career, your design. Unleash your ambition in our dynamic, autonomous environment.
• Drive meaningful change. Build a fairer future for every employee by joining a market leader that is improving the world of work.
• Belong to something bigger. Collaborate with a passionate, diverse and talented team around the globe.