Security Platform Engineer

Hackajob Ltd; City of Westminster; On-site; GBP 34,000 - 46,000; Full time

Job summary

Hackajob Ltd. is seeking a senior security engineer to deliver and secure private cloud services with top-tier security requirements. You will work closely with incident response, platform engineering, and security architects to integrate validation and hardening into operations.

The role is based on-site in the UK, with occasional on-call for incidents and critical operations, and requires DV clearance or eligibility, including UK citizenship.

Qualifications

• Bachelor's degree or equivalent practical experience in a relevant field.
• 5+ years in security engineering, red/purple teaming or platform engineering.
• Experience with infrastructure-as-code and GitOps (Terraform, Helm, ArgoCD) and cloud-native security orchestration.
• Kubernetes security experience and container orchestration.
• Scripting/development in Python/Go for security tooling and PoCs.
• Active DV UK security clearance or ability to obtain it.
• Advanced offensive security certifications (e.g., OSCP, OSEP, OSCE, GXPN).
• Experience conducting full-scope Red Team and Purple Team engagements in cloud-native environments.
• Experience developing exploits, adversary emulation or security automation frameworks.
• Knowledge of cloud-native logging/monitoring and SIEM integration for threat detection.
• Understanding of Kubernetes attack surfaces: container escapes, privilege escalation, lateral movement.
• Current/active UK DV Security Clearance.

Responsibilities

• Deliver, operate, and secure private cloud services for customers with high security requirements.
• Scale, secure, and maintain private cloud deployments for critical customers.
• Collaborate with Google product teams to continually improve technology.
• Integrate security validation and defensive hardening into infrastructure/workflows.
• Participate in rotating on-call schedule outside core hours and weekends.
• Deploy, configure, and manage cloud security platform tools (SIEM, IDS/IPS, CWPP).
• Develop security monitoring and logging strategies.
• Investigate security incidents, perform root-cause analysis and remediation.
• Perform forensic analysis of suspicious activity.
• Automate security tasks and workflows to improve efficiency.

Skills

Security engineering

Red Team

Purple Team

Cloud security

Kubernetes security

Scripting (Python, Go)

UK citizenship

DV clearance

DevOps / GitOps

Education

Bachelor's degree in Computer Science or related field

Equivalent practical experience

Tools

Terraform

Helm

ArgoCD

Kubernetes

RBAC

SIEM

CWPP

Job description

Salary: £40,000 - 40,000 per year

Requirements

• Bachelors degree in Computer Science, Information Security, a related field, or equivalent practical experience.
• 5 years of experience in security engineering, offensive security (Red Team/Purple Team), or platform engineering roles.
• Experience with infrastructure-as-code and GitOps (e.g., Terraform, Helm, ArgoCD) and cloud-native security orchestration.
• Experience with Kubernetes security (e.g., workload isolation, RBAC, network policies) and container orchestration.
• Experience in scripting and development languages (e.g., Python, Go) for building custom security tooling, automation, and exploit Proof-of-Concept (PoCs).
• Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance.
• Advanced offensive security certifications (e.g., OSCP, OSEP, OSCE, GXPN).
• Experience in conducting full-scope Red Team engagements and Purple Team exercises in cloud-native environments.
• Experience developing custom exploits, adversary emulation scenarios, or security automation frameworks for internal testing.
• Knowledge of cloud-native logging, monitoring, and Security Information and Event Management (SIEM) integration for detecting sophisticated adversary tactics.
• Understanding of Kubernetes attack surfaces, including container escapes, privilege escalation, and lateral movement techniques.
• Current and active UK Developed Vetting (DV) Security Clearance.
• Must be a British citizen to meet compliance and security clearance requirements.

Responsibilities

• Deliver, operate, and secure private cloud services for customers with exceptionally high security requirements.
• Help scale, secure, and maintain private cloud deployments for critical customers.
• Work closely with Google product teams to continually improve our technology.
• Collaborate with Incident Response, Platform Engineering, and Security Architects to integrate security validation and defensive hardening into infrastructure and operational workflows.
• Participate in a rotating on-call schedule outside core business hours and over the weekend to support security incidents and critical operations.
• Deploy, configure, and manage cloud security platform tools and technologies, including SIEM, IDS/IPS, and CWPP.
• Develop and implement security monitoring and logging strategies.
• Investigate and analyse security incidents, including root cause, scope of impact, containment, and remediation.
• Perform forensic analysis to identify and investigate suspicious activity.
• Automate security tasks and workflows to improve efficiency and effectiveness.

Technologies

• ArgoCD
• Cloud
• GitOps
• Helm
• Support
• Kubernetes
• Network
• Python
• RBAC
• Security
• Terraform

More

We are partnering directly with Google to hire for this role within Google Public Sectors UK Security Operations (SecOps) team. We deliver and operate private cloud services that provide the flexibility, reliability, and scalability of public cloud for customers with exceptionally high security requirements. This is an engineering-centric, on‑site position based in either Wiltshire or London, requiring a standard five‑day‑per‑week office schedule.