Senior Cloud Security Engineer

Tenth Revolution Group; Greater London; Hybrid; GBP 80,000 - 110,000; Full time

Job summary

Tenth Revolution Group in London is seeking an experienced Senior Security Engineer (Cloud & SecOps) to own threat detection, incident response and cloud security across a complex AWS-hosted SaaS environment.

This hands-on role combines security engineering with operational security, offering significant ownership and opportunities to shape detection, response capabilities and security automation. You will collaborate with Engineering, Platform and IT teams to enhance controls and resilience.

Qualifications

• Strong background in security operations and hands-on security role.
• Experience securing AWS environments including IAM, logging and cloud controls.
• Practical SIEM experience—developing/detecting rules, not only alerting.

Responsibilities

• Own and strengthen the security posture of the AWS environment, including IAM, logging, security controls and cloud risk remediation.
• Manage and optimise the SIEM platform, developing detection use cases, tuning alerts and improving threat visibility.
• Oversee the managed Security Operations Centre (SOC), ensuring effective monitoring, escalation and incident handling.
• Lead security incident response activities, including investigation, containment, root cause analysis and remediation.
• Drive vulnerability management, penetration testing and external attack surface monitoring.
• Strengthen security across corporate systems, endpoints and SaaS applications.
• Develop security automation using scripting and infrastructure-as-code.
• Work closely with Engineering, Platform and IT teams to improve security controls and operational resilience.
• Provide security metrics and support audit and assurance activities.

Skills

Security operations

Cloud security engineering

AWS security

SIEM

Kubernetes security

Incident response

Python scripting

Infrastructure as code

Communication skills

Tools

AWS CloudTrail

AWS GuardDuty

AWS Security Hub

AWS Organizations

EKS (Kubernetes)

Job description

Location: London (Hybrid – 2 days per week in the office)

Global, technology-led organisation providing solutions to some of the world's leading financial institutions.

They are looking for an experienced Senior Security Engineer (Cloud & SecOps) to join their Information Security team and take ownership of threat detection, incident response and cloud security across a complex AWS-hosted SaaS environment.

This is a hands-on role with significant ownership, combining security engineering, operational security and the opportunity to shape detection and response capabilities.

Key Responsibilities

• Own and strengthen the security posture of the AWS environment, including IAM, logging, security controls and cloud risk remediation.
• Manage and optimise the SIEM platform, developing detection use cases, tuning alerts and improving threat visibility.
• Oversee the managed Security Operations Centre (SOC), ensuring effective monitoring, escalation and incident handling.
• Lead security incident response activities, including investigation, containment, root cause analysis and remediation.
• Drive vulnerability management, penetration testing and external attack surface monitoring.
• Strengthen security across corporate systems, endpoints and SaaS applications.
• Develop security automation using scripting and infrastructure-as-code.
• Work closely with Engineering, Platform and IT teams to improve security controls and operational resilience.
• Provide security metrics and support audit and assurance activities.

Skills & Experience

• Strong background in security operations, cloud security engineering or a similar hands-on security role.
• In-depth experience securing AWS environments, including IAM, CloudTrail, GuardDuty, Security Hub and AWS Organizations.
• Practical SIEM experience, including developing and tuning detection rules, not just responding to alerts.
• Experience with container and Kubernetes security, ideally Amazon EKS.
• Proven experience leading security incident investigations and response within cloud environments.
• Experience managing or working closely with an outsourced SOC or MDR provider.
• Scripting experience with Python or similar languages, alongside infrastructure-as-code.
• Strong communication skills, with the ability to explain technical security risks to different stakeholders.

If you have strong AWS security experience, enjoy building effective detection and response capabilities, and want a role with genuine technical ownership, we'd be happy to hear from you.