Security Engineer: Secure-by-Design & Cloud Security Lead

Surevine; Greater London; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Flexible working arrangements

Accommodations available

Mentorship and onboarding

Job summary

Surevine is hiring for a security-focused role to own security across our corporate estate, cloud environments, and the standards we follow. You will work with engineering to ensure secure-by-design outcomes while avoiding policy-only approaches.

Ideal candidates have 3–5 years in security, with hands-on experience in ISO 27001, cloud security, and risk management. The role offers growth into client-facing work and active collaboration with our CISO.

Qualifications

• 3-5 years experience in security, security risk, or a related technology role.
• Working knowledge of ISO 27001, Cyber Essentials and comparable frameworks as a practitioner.
• Some exposure to cloud and SaaS security; identity and access management, logging, configuration hardening etc.
• Comfortable thinking about security risk end to end; spotting it, getting it owned by the right person, tracking what happens next.
• Credible with engineers. You will be advising people who build secure systems for a living.
• Comfortable facilitating a room; design workshops, threat modelling sessions, risk reviews
• Able to explain security trade-offs to engineers, executives and customers
• Security-conscious pragmatism. Distinguish between risks to stop and risks to document
• Able to communicate effectively in a remote environment through written and verbal channels

Responsibilities

• Take ownership of security across our corporate estate and cloud environments, driving the plan and doing the work with the InfraCare team.
• Make ISO27001 and Cyber Essentials obligations business-as-usual; automated where possible and evidenced as a by-product of how we work.
• Help build visibility: logging, monitoring and alerting that allows us to detect issues proactively.
• Take part in security reviews and help our engineers run their own.
• Lead when something goes wrong: run the process, decide escalation, and liaise with clients and partners.
• Advise engineering teams on security of what we build; contribute to design workshops and challenge assumptions early.
• Own our security risk picture and make it useful and understood by the board.
• Answer hard security questions from customers, prospects, and assurance teams.

Skills

Security risk

ISO 27001

Cloud security

Stakeholder mgmt

Threat modelling

Tools

AWS

GCP

GitLab CI/CD

Terraform

Pulumi

Job description

Surevine is hiring for a security-focused role to own security across our corporate estate, cloud environments, and the standards we follow. You will work with engineering to ensure secure-by-design outcomes while avoiding policy-only approaches.

Ideal candidates have 3–5 years in security, with hands-on experience in ISO 27001, cloud security, and risk management. The role offers growth into client-facing work and active collaboration with our CISO.