Senior Cloud & App Security Engineer (AWS)

Aboutus Ft; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Generous annual leave

Medical cover

Parental leave

Job summary

The Financial Times is seeking a Senior Cyber Security Engineer to mature application and cloud security across our cloud-native AWS estate. The role combines practical security work with mentoring and potential line management, ensuring secure delivery by default.

You will improve guardrails for SAST, SCA, secret scanning, and IaC scanning, and lead vulnerability management at scale while collaborating closely with product, platform, and engineering teams.

Qualifications

• Strong practical experience in application security and cloud security.
• Hands-on AWS security experience and remediation approaches.
• Experience improving vulnerability management across engineering teams.
• Experience improving cloud or IaC misconfiguration management at scale.
• Experience with security tooling in CI/CD workflows (SAST, SCA, secret scanning, IaC scanning).
• Ability to write Python scripts to automate security workflows.

Responsibilities

• Improve application security guardrails with actionable controls for engineers.
• Improve cloud and IaC security guardrails to reduce misconfigurations.
• Drive vulnerability management across engineering teams.
• Drive cloud misconfiguration management using developer-friendly workflows.
• Run practical threat modelling sessions influencing design decisions.
• Build automation and tooling to reduce manual effort.
• Support secure architecture decisions in reviews and roadmaps.
• Partner with product, platform and software engineering teams.
• Support incidents and lessons learned and share patterns.
• Mentor security engineers and possibly line-manage.

Skills

Application security

Cloud security

AWS security

Vulnerability management

Threat modelling

CI/CD security

SAST

Secret scanning

IaC scanning

Python scripting

Automation tooling

Security leadership

Agile/Scrum

Tools

Terraform

CloudFormation

Splunk

Job description

The Financial Times is seeking a Senior Cyber Security Engineer to mature application and cloud security across our cloud-native AWS estate. The role combines practical security work with mentoring and potential line management, ensuring secure delivery by default.

You will improve guardrails for SAST, SCA, secret scanning, and IaC scanning, and lead vulnerability management at scale while collaborating closely with product, platform, and engineering teams.