Security Engineer

Carbon3ai Limited.; United Kingdom; Hybrid; GBP 80,000 - 110,000; Full time

Job summary

Era4 is seeking a Security Engineer to design, implement, and continuously improve security controls across our next‑generation AI infrastructure and datacentre operations in the United Kingdom. You will protect Kubernetes‑based and cloud‑native environments, secure datacentre networking, and enable secure software delivery practices.

You will collaborate with engineering, platform, and operations teams to integrate security into our proprietary cloud infrastructure, CI/CD pipelines,

Qualifications

• Experience in Security Engineering, Cloud Security, DevSecOps, Infrastructure Security, or Datacentre Security.
• Hands-on experience with vulnerability management platforms and security assessment methodologies.
• Familiarity with CI/CD security controls, secure software development practices, and supply chain security.
• In-depth scripting and automation skills using Python, Bash, or similar languages.

Responsibilities

• Design, implement, and maintain security standards and controls for on prem Kubernetes.
• Review infrastructure architectures and perform security assessments to identify risks and mitigations.
• Integrate security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, container image scanning, and secrets detection.
• Partner with development teams to implement secure coding practices and remediate security findings.
• Conduct threat modelling and security reviews for new applications, services, and infrastructure changes.

Skills

Security engineering

Cloud security

DevSecOps

Infrastructure security

Threat modelling

Scripting (Python/Bash)

Tools

Palo Alto firewalls

OpnSense

Nokia networking

CI/CD tooling

Job description

Era4 develops, owns and operates AI infrastructure across the UK, powered by renewable energy. Converting legacy industrial and energy sites into modern data-centre facilities, Era4 is combining brownfield regeneration opportunities with cleaner, efficient, scalable compute capacity for healthcare, research, finance, enterprise, and public-sector organisations.

We are seeking a Security Engineer to design, implement, and continuously improve security controls across our next-generation AI infrastructure and datacentre operations. This role focuses on protecting Kubernetes-based and cloud-native environments, securing our datacentre networking and infrastructure stack, strengthening security posture, identifying and mitigating risks, and enabling secure software delivery practices.

You will work closely with engineering, platform, and operations teams to integrate security into Era4's proprietary cloud infrastructure, datacentre networks, CI/CD pipelines, containerized workloads, GPU-accelerated compute, and AI/ML platforms. The successful candidate will combine hands‑on technical expertise with a proactive approach to threat detection, vulnerability management, and security automation across our brownfield‑to‑modern bare metal and cloud infrastructure environments.

Key Responsibilities:

• Design, implement, and maintain security standard and controls for on prem Kubernetes.
• Review infrastructure architectures and perform security assessments to identify risks and recommend mitigations.

Application & DevSecOps Security

• Integrate security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, container image scanning, and secrets detection.
• Partner with development teams to implement secure coding practices and remediate security findings.
• Conduct threat modelling and security reviews for new applications, services, and infrastructure changes.

Vulnerability & Risk Management

• Lead vulnerability identification, prioritisation, remediation, and reporting activities across infrastructure and applications.

Detection & Response

• Develop and maintain security monitoring, alerting, detection capabilities and incident response playbooks.
• Investigate security incidents, perform root cause analysis, and coordinate remediation activities.

Security Automation

• Build automation to improve security monitoring, compliance validation, vulnerability management, and incident response workflows.
• Leverage Infrastructure as Code and policy-as-code frameworks to enforce security standards at scale.

Required Qualifications & Experience

• Experience in Security Engineering, Cloud Security, DevSecOps, Infrastructure Security, or Datacentre Security.
• Hands‑on experience with vulnerability management platforms and security assessment methodologies.
• Familiarity with CI/CD security controls, secure software development practices, and supply chain security.
• In‑depth scripting and automation skills using Python, Bash, or similar languages.

Nice to have:

• Experience securing AI/ML or GPU‑based infrastructure, datacentre network security, firewalls, and network segmentation (Palo Alto firewalls, OpnSense, Nokia networking, or similar).
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF, CIS Benchmarks, or PCI DSS.
• Experience with threat modelling, penetration testing, or red team engagements.
• Security certifications such as CISSP, GSEC, GCIH, GCIA, CCSK, CCSP, or relevant cloud security certifications.

Why Join Era4:

You’llbe joining a mission‑driven start‑up building critical national infrastructure, where operational excellence directly enables growth. This role offers high visibility with leadership, real autonomy, and the chance to shape how a next‑generation companyoperatesat scale.

Diversity & Inclusion

Era4 is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Technology

United Kingdom: (Occasional office visit required)