Security Platform Engineer

Addition; Farnborough; On-site; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Annual bonus

Private medical insurance

Life assurance

25 days annual leave + bank holidays

Professional development funding

On-site parking, gym, café

Job summary

Addition is recruiting a Security Platform Engineer to design, deploy and operate cloud-native security tooling for Defence and National Security customers. You will work with Kubernetes, SIEMs, vulnerability tooling and EDR, embedding security across the software delivery lifecycle in collaboration with Platform, DevOps and Software teams.

You will automate security processes, harness IaC and scripting, and contribute to platform hardening and monitoring improvements while ensuring compliance

Qualifications

• Experience as Security/Platform Engineer or similar in cloud-native environments.
• Experience with SIEM (Splunk) and vulnerability tools (Nessus).
• Knowledge of container security and CI/CD security integrations.

Responsibilities

• Design, deploy and maintain security tooling in Kubernetes environments.
• Administer SIEM platforms and vulnerability management tooling.
• Manage EDR, endpoint security tooling and security controls in CI/CD pipelines.
• Automate security processes using IaC and scripting.
• Collaborate with Platform, DevOps and Software teams to embed security.

Skills

Kubernetes

Cloud Security

Automation

Python

Bash

Terraform

Ansible

CI/CD

Splunk

Nessus

EDR

Helm

Education

Tools

Fluent Bit

Prometheus

Grafana

ArgoCD

GitOps

Job description

Work on Technology That Protects What Matters

We're looking for a Security Platform Engineer to join a growing engineering team delivering secure, mission‑critical technology for Defence and National Security customers.

This is an opportunity to work with cutting‑edge cloud‑native technologies in highly secure environments, helping to build and maintain the platforms that underpin critical operational systems. You'll work alongside software engineers, DevOps specialists, architects and security professionals to ensure security is embedded throughout the software delivery lifecycle.

If you're passionate about Kubernetes, cloud security, automation and modern security tooling, we'd love to hear from you.

What You'll Be Doing

As a Security Platform Engineer, you'll be responsible for designing, deploying and maintaining security tooling across cloud‑native platforms. You'll help improve security visibility, automate operational processes and ensure platforms remain resilient, secure and compliant.

Your responsibilities will include:

• Deploying, configuring and maintaining security tooling within Kubernetes environments.
• Administering SIEM platforms such as Splunk for monitoring, alerting and log management.
• Deploying and maintaining vulnerability management platforms including Nessus.
• Managing endpoint security tooling and EDR deployments.
• Integrating security controls into CI/CD pipelines and DevSecOps workflows.
• Automating security processes using Infrastructure as Code and scripting.
• Supporting Kubernetes observability using tools such as Fluent Bit, Prometheus and Grafana.
• Working closely with Platform, DevOps and Software Engineering teams to embed security throughout the development lifecycle.
• Maintaining configuration, documentation and infrastructure as code.
• Supporting security investigations and helping improve monitoring, detection and response capabilities.
• Contributing to platform hardening, vulnerability remediation and continuous security improvement.

What We're Looking For

We're interested in engineers who enjoy solving complex technical challenges and have experience across modern cloud‑native security platforms.

Ideally you'll have experience with:

• Commercial experience as a Security Engineer, Platform Engineer, DevSecOps Engineer or similar.
• Experience administering SIEM platforms such as Splunk.
• Experience deploying and managing vulnerability scanning tools such as Nessus.
• Experience deploying or managing Endpoint Detection & Response (EDR) platforms.
• Strong understanding of container security principles.
• Experience integrating security into CI/CD pipelines.
• Scripting skills using Python, Bash, PowerShell or similar.
• Infrastructure as Code using Terraform, Ansible or similar.
• Experience working within Azure, AWS or hybrid cloud environments.
• Knowledge of security best practices and secure‑by‑design principles.
• Kubernetes observability tools including Fluent Bit.
• Helm, GitOps or ArgoCD.
• Knowledge of MITRE ATT&CK or similar threat frameworks.
• Threat modelling or security architecture experience.
• Familiarity with additional SIEM or observability platforms.
• Experience working within Defence, Government or highly regulated environments.
• Security or Kubernetes certifications such as CKA, CKAD, CISSP, CEH or equivalent.

What You'll Bring

You’ll be someone who:

• Takes ownership and accountability.
• Thinks critically and continuously looks for improvements.
• Works collaboratively across multidisciplinary teams.
• Communicates technical concepts clearly.
• Has a passion for automation and cloud‑native technologies.
• Enjoys learning new tools and security practices.

What's On Offer

• Annual bonus.
• Private medical insurance.
• Life assurance.
• 25 days annual leave plus bank holidays.
• Professional development and funded training.
• Modern office facilities with on‑site parking, gym, café and breakout areas.
• Opportunity to work on genuinely meaningful projects supporting UK Defence and National Security.

Security Clearance

Due to the nature of the work, candidates must be eligible to obtain UK Security Clearance (SC).

Applicants must normally have lived in the UK for the required residency period to satisfy UK Security Vetting requirements.

Interested?

If you're looking to work with modern cloud technologies, Kubernetes and security tooling on projects that make a real difference, we'd love to hear from you.