Security Platform Engineer

Digi2Al Limited; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Salary £70k–£100k per annum

Flexible working

25 days holiday increasing to 30

2 paid charity days

Employee Ownership Trust

Job summary

Google Public Sector's UK SecOps team in London, England, seeks a Security Platform Engineer to design, build and manage cloud-native security platforms with a Kubernetes focus.

The role involves automating security controls, developing scalable tooling, and enabling robust detection and response capabilities across our cloud infrastructure, with on-call rotations outside core hours.

Qualifications

• Bachelor's degree in Computer Science or related field, or equivalent practical experience.

Responsibilities

• Design, build and manage cloud-native security platforms with a strong emphasis on Kubernetes-based environments.

Skills

Kubernetes security

RBAC

Network policies

Python

Go

Bash

Education

Bachelor's degree in Computer Science or related field

Tools

Kubernetes observability tools (Falco, Prometheus, Grafana)

Terraform

Helm

ArgoCD

Job description

The UK Security Operations (SecOps) team in Google Public Sector delivers, operates and secures private cloud services. We aim to provide the flexibility, reliability and scalability of public cloud for customers with exceptionally high security requirements that can only be met in a private cloud environment. We deliver and operate these private cloud deployments for the most critical customers, helping scale, secure and maintain the deployment whilst working closely with Google product teams to continually improve our technology.

As a Security Platform Engineer, you will play a critical role in designing, building and managing cloud-native security platforms with a strong emphasis on Kubernetes based environments. You'll be at the intersection of security and engineering, developing scalable tooling, automating security controls and enabling robust detection and response capabilities across our cloud infrastructure. This is a hands on engineering centric role that requires deep technical expertise in cloud environments, Kubernetes security and platform automation. You'll work closely with Incident Response Engineers and platform teams to ensure that security is seamlessly integrated into our infrastructure and operational workflows. This role will require participation in a rotating on call schedule outside of core business hours and over the weekend to ensure security incidents can be swiftly resolved.

Requirements

• Deploy, configure, and manage cloud security platform tools and technologies, including
• Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems
• (IDS/IPS), and Cloud Workload Protection Platforms (CWPP).
• Develop and implement security monitoring and logging strategies.
• Investigate and analyse security incidents, including identifying root causes, determining the scope of impact, and taking appropriate containment and remediation actions.
• Perform forensic analysis to identify and investigate suspicious activity.
• Automate security tasks and workflows to improve efficiency and effectiveness.

Minimum Qualifications (MQs)

• Bachelor's degree in Computer Science, Information Security, a related field, or equivalent practical experience.
• 5+ years of experience in security engineering, DevSecOps, or platform engineering roles.
• Experience with Kubernetes security, including workload isolation, RBAC, and network policies, and good understanding of containerisation, orchestration, and Kubernetes observability tools (e.g., Falco, Prometheus, Grafana)
• Experience with technical troubleshooting and scripting languages such as Python, Go, or Bash.
• Familiarity with infrastructure-as-code and configuration management tools (e.g., Terraform, Helm, ArgoCD).
• Eligibility to obtain UK Developed Vetting (DV) security clearance; British Citizenship is required for this role.

Preferred Qualifications (PQs)

• Certifications in Security (e.g., GSEC, CISSP, CISM, OSCP).
• Experience with Kubernetes threat detection and anomaly detection.
• Familiarity with service mesh security concepts (e.g., Istio, Linkerd) and workload identity.
• Background in detection engineering, logging pipeline development, or SIEM tuning in containerised environments.
• Contributions to security-focused open-source projects or internal security platform tooling.
• Current and active UK Developed Vetting (DV) Security Clearance.
• Salary: £70,000 to £100,000 per annum
• 25 days holiday increasing annually up to a maximum of 30 days
• Support for flexible working
• 2 paid charity days a year
• 16 weeks of full pay Maternity leave
• 2 weeks full pay Paternity leave
• Annual bonus - all employees are eligible (following successful completion of probationary period) - level varies by position and is dependent on company performance
• Discretionary bonus for exceptional performance
• Employee Ownership Trust - following successful completion of probationary period
• Support with your professional development including training and certifications and attendance at conferences
• Diverse and interesting projects which give you an opportunity to make a difference
• Choice of laptop and screen

Security Platform Engineer • London, England, GB