Senior Cloud Security Engineer

Form3 - External; United Kingdom; Remote; GBP 60,000 - 80,000; Full time

Job summary

A leading company in payment technology is seeking a security engineer to build and maintain defensive security controls for multi-cloud systems. The ideal candidate will have extensive experience in Kubernetes security and cloud environments, contributing to a team dedicated to enhancing security practices. Join a remote-first organization that values diversity and offers opportunities for growth.

Qualifications

• Expertise in Kubernetes security and complex multi-cluster environments.
• Experience securing at least one public cloud with hardening practices.

Responsibilities

• Build and run defensive security controls for multi-cloud payment systems.
• Advise engineering teams on security features and prioritize controls.

Skills

Linux

Kubernetes

Security Practices

Cloud Security

Engineering Practices

Tools

AWS

GCP

Azure

Golang

Terraform

Job description

THE ROLE

You will build and run defensive security controls for highly-available multi-cloud payment systems running the latest technology. You understand current threats, exploitation paths, and risk tradeoffs to advise engineering teams on security features and prioritize defensive controls.

WE'RE LOOKING FOR

Essential

• You live on the Linux command line
• Your research and experience support your opinions on security practices and tradeoffs, which you openly debate and share
• You're sought after for Kubernetes security expertise and have developed complex, heavily customized multi-cluster environments
• Your security expertise extends to at least one public cloud, including essential security features and long-term hardening practices
• You appreciate building systems with good engineering practices and may have a background in software engineering at scale
• You're open to being part of our on-call rota for severe security incidents or tooling failures

Desirable

• You have an interest in offensive security, including participation in CTFs or experience as a red team operator or pen tester
• You have developed security configurations in multiple cloud environments
• You are confident in presenting and promoting security awareness across teams
• You support building and analyzing threat models using defined processes
• You have experience securing data centers and networking devices
• You are concerned about supply chain and CI/CD security but have effective risk reduction patterns
• Your engineering experience aligns with Form3's tech stack, including Golang and Terraform

TECH STACK

• AWS, GCP, Azure, and private Data Centers
• Kubernetes, Helm, Flux
• Distributed systems, mainly Golang with CockroachDB and NATS
• SIEM/SOAR, EDR, CNAPP, and open-source tools with custom integrations

THE TEAM

You will join a team of security engineers maintaining and expanding security controls, advising wider platform and application teams within R&D. We report to the CISO and collaborate with other InfoSec functions.

INTERVIEW PROCESS

1. Screening Call with Talent Team
2. Technical Interview on Kubernetes and Linux Security, including a pre-interview research topic
3. Technical Interview on building secure cloud architectures & team alignment

Additional stages may occur to ensure the right fit.

HIRING LOCATIONS

Remote-first organization accepting applications from Germany, Netherlands, Spain, Portugal, and UK.

ABOUT FORM3

Revolutionizing payments with innovative technology. For more, see: What we do | Life at Form3 | Benefits | Flexa-verified employer | Podcasts

OUR DEI&B COMMITMENT

We value diversity and inclusion, fostering an environment based on open-mindedness and curiosity. Our processes promote equal opportunity, and we guarantee interviews for neurodiverse and disabled applicants who meet minimum criteria. Please notify us of any accommodations needed during recruitment.