Security Engineer

LT Harper Recruitment Group; Greater London; Hybrid; GBP 68,000 - 83,000; Full time

Benefits offered by this job

Annual performance bonus

Unlimited holidays

Private medical

Healthcare cashback

Life assurance 4x salary

Training budget

Job summary

LT Harper Group in London is hiring a Security Engineer to own cloud security, SIEM, and SecOps across AWS and the software delivery lifecycle. The role covers AWS run-time security, incident response, and security tooling integration within CI/CD in a SaaS environment used by financial clients.

The position is a senior IC with 2 days in the London office, offering a performance bonus and generous holiday. UK right to work is required and visa sponsorship is not available.

Qualifications

• 5+ years in security engineering with hands-on AWS
• Experience in SaaS or product companies, not just large-enterprise
• Cloud & SecOps: designing and tuning detections, leading incident response in the cloud
• AppSec: integrating security tooling into CI/CD and reading code in Java, Ruby or Python
• Python scripting, plus IaC knowledge
• Able to explain technical risk clearly to non-technical colleagues

Responsibilities

• Own the SIEM: onboard log sources, tune detections, track MITRE ATT&CK coverage
• Run the managed SOC relationship with escalation runbooks and SLAs
• Lead incident response in AWS end-to-end from containment to root cause analysis
• Own AWS run-time security: IAM, SCPs, GuardDuty, Security Hub and logging coverage
• Own pipeline guardrails: SAST, SCA, secrets, IaC and container scanning with gating

Skills

Security engineering

AWS

Azure (strong)

CI/CD security

Threat modelling

Tools

GuardDuty

Security Hub

IAM

SAST tools

SCA tools

Job description

Security Engineer: Cloud & SecOps or Application Security | London, hybrid

You’ll join a small Information Security team at a London-headquartered B2B SaaS platform used by global banks, brokers and asset managers, and you’ll own a domain end to end. There are two seats: one owning detection, response and AWS run-time security, the other owning security across the software development lifecycle.

The essentials

• Salary: up to 75K GBP/annum + annual performance bonus, unlimited holidays
• London, hybrid: 2 days a week in the office
• Senior individual contributor, reporting to the Head of Information Security
• UK right to work required; visa sponsorship isn’t available

Security Engineer - What you’ll do:

• Own the SIEM: onboard log sources, build and tune detections, track coverage against MITRE ATT&CK
• Run the managed SOC relationship: escalation runbooks, triage quality and SLAs
• Lead incident response in AWS end to end, from containment to root cause analysis
• Own AWS run-time security: IAM, SCPs, GuardDuty, Security Hub and logging coverage

Application Security track

• Own pipeline guardrails: SAST, SCA, secrets, IaC and container scanning, with gating agreed with Engineering
• Turn ASPM findings into prioritised, remediated work based on reachability and exploitability
• Lead threat modelling and secure design reviews, and grow a security champions network

Security Engineer - What you’ll need:

• 5+ years in security engineering with hands-on AWS (strong Azure plus some AWS considered)
• Experience in SaaS or product companies, not only large-enterprise environments
• Cloud & SecOps: designing and tuning detections, and leading incident response in the cloud
• AppSec: integrating security tooling into CI/CD, and reading code in Java, Ruby or Python
• Python or similar scripting, plus working knowledge of infrastructure-as-code
• Explaining technical risk clearly to non-technical people

Nice to have

• Regulated-environment experience: DORA, ISO 27001 or SOC 2
• Kubernetes or EKS security
• Detection-as-code, SOAR, CSPM/CNAPP, or ASPM and supply chain security (SBOMs, SLSA)
• Certifications such as AWS Security Specialty, GIAC or OSWE (helpful, not required)

What’s in it for you

• Annual performance bonus
• Unlimited holiday (most people take 30 to 35 days)
• Private medical, healthcare cashback and 4x salary life assurance
• Training budget and flexible working hours
• Enhanced family leave and up to 6 weeks a year working abroad
• 4 volunteering days, Cycle to Work and Tech Scheme

Apply

LT Harper is handling this search on our client's behalf. If you’re interested, apply directly on this advert. If you have any questions, or would like to refer someone, reach out to Adam Sawa at [e-mail]. If you meet most but not all of the essentials, we’d still like to hear from you, and if you need any adjustments during the process, tell us and we’ll make them.