Security Engineer

Bestman Solutions. International; Greater London; Hybrid; GBP 90.000 - 130.000; Vollzeit

Zusammenfassung

Bestman Solutions International is seeking a Senior Security Engineer (Cloud & SecOps) to own threat detection, incident response and cloud security across a complex AWS-hosted SaaS environment. This hands-on role offers significant ownership over security operations and the opportunity to shape detection and response capabilities.

You will work closely with Engineering, Platform and IT teams to strengthen IAM controls, logging and security posture, while managing an outsourced SOC/MDR provider

Qualifikationen

• Hands-on security role focusing on threat detection and incident response.
• Deep AWS security experience including IAM, CloudTrail, GuardDuty, Security Hub and AWS Organizations.
• Experience with SIEM tuning and threat detection development.
• Experience with containers and Kubernetes security, preferably EKS.
• Experience coordinating with outsourced SOC or MDR providers.
• Scripting experience with Python and infrastructure-as-code.

Aufgaben

• Own and strengthen the security posture of the AWS environment, including IAM, logging, security controls and cloud risk remediation.
• Manage and optimise the SIEM platform, developing detection use cases, tuning alerts and improving threat visibility.
• Oversee the managed Security Operations Centre (SOC), ensuring effective monitoring, escalation and incident handling.
• Lead security incident response activities, including investigation, containment, root cause analysis and remediation.
• Drive vulnerability management, penetration testing and external attack surface monitoring.
• Strengthen security across corporate systems, endpoints and SaaS applications.
• Develop security automation using scripting and infrastructure-as-code.
• Work closely with Engineering, Platform and IT teams to improve security controls and operational resilience.
• Provide security metrics and support audit and assurance activities.

Kenntnisse

Security operations

Cloud security engineering

AWS security

Incident response

Scripting Python

Infrastructure as Code

Jobbeschreibung

Location: London (Hybrid – 2 days per week in the office)

We are working with a global, technology-led organisation providing solutions to some of the world's leading financial institutions.

They are looking for an experienced Senior Security Engineer (Cloud & SecOps) to join their Information Security team and take ownership of threat detection, incident response and cloud security across a complex AWS-hosted SaaS environment.

This is a hands‑on role with significant ownership, combining security engineering, operational security and the opportunity to shape detection and response capabilities.

Key Responsibilities

• Own and strengthen the security posture of the AWS environment, including IAM, logging, security controls and cloud risk remediation.
• Manage and optimise the SIEM platform, developing detection use cases, tuning alerts and improving threat visibility.
• Oversee the managed Security Operations Centre (SOC), ensuring effective monitoring, escalation and incident handling.
• Lead security incident response activities, including investigation, containment, root cause analysis and remediation.
• Drive vulnerability management, penetration testing and external attack surface monitoring.
• Strengthen security across corporate systems, endpoints and SaaS applications.
• Develop security automation using scripting and infrastructure-as-code.
• Work closely with Engineering, Platform and IT teams to improve security controls and operational resilience.
• Provide security metrics and support audit and assurance activities.

Skills & Experience

• Strong background in security operations, cloud security engineering or a similar hands‑on security role.
• In-depth experience securing AWS environments, including IAM, CloudTrail, GuardDuty, Security Hub and AWS Organizations.
• Practical SIEM experience, including developing and tuning detection rules, not just responding to alerts.
• Experience with container and Kubernetes security, ideally Amazon EKS.
• Proven experience leading security incident investigations and response within cloud environments.
• Experience managing or working closely with an outsourced SOC or MDR provider.
• Scripting experience with Python or similar languages, alongside infrastructure-as-code.
• Strong communication skills, with the ability to explain technical security risks to different stakeholders.

If you have strong AWS security experience, enjoy building effective detection and response capabilities, and want a role with genuine technical ownership, we'd be happy to hear from you.