Senior Cloud Security Engineer - AWS & SIEM

Duco; London Borough of Islington; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Healthcare cashback

Private medical insurance

4X salary life assurance

Unlimited annual holiday

Enhanced family leave

Employee Assistance Programme

Cycle to Work and Tech Scheme

Volunteering days off

Flexible working policy (2 days in the

Opportunity to work abroad for up to 6

Job summary

Duco is seeking an experienced Senior Security Engineer (Cloud & SecOps) to own threat detection, response and prevention for our AWS-hosted SaaS platform. You will manage the SIEM and our managed SOC, define detection strategies and lead incident response while ensuring runtime security across our AWS estate.

You will work with a cross-functional team in London and Wrocław, reporting to the Head of Information Security, and collaborate with Engineering, Platform and IT to maintain strong

Qualifications

• Proven experience in a security operations or cloud security engineering role.
• Hands-on SIEM experience: design, tuning, and alert response.
• In-depth knowledge of AWS security services and architecture (IAM, SCPs, CloudTrail, GuardDuty, Security Hub).
• Experience with container/Kubernetes runtime security, ideally on EKS.
• Track record leading security incident response in cloud environments.
• Experience with managed SOC or MDR providers.
• Python or similar scripting for automation.
• Infra-as-code knowledge (e.g., Terraform, CloudFormation).
• Strong ability to communicate risk to non-technical stakeholders.
• Experience with detections-as-code practices and SOAR playbooks.
• CNAPP/CSPM tooling familiarity.
• Knowledge of DORA, ISO 27001, SOC 2 is a plus.

Responsibilities

• Own the run-time security posture of the AWS environment including IAM, guardrails, logging, and remediation of findings.
• Secure the corporate environment (Google Workspace, endpoints, SaaS) with IT collaboration.
• Lead infrastructure vulnerability management and external attack surface management.
• Coordinate pen-testing, scoping to remediation closure.
• Own the SIEM platform: onboarding, detection use cases, MITRE ATT&CK coverage.
• Manage the SOC relationship, SLAs, and incident response end-to-end.
• Automate security processes via scripting and IaC, deliver security metrics.
• Support audits and client assurance with evidence of controls.

Skills

Security operations

Cloud security engineering

SIEM tuning

AWS security services

Kubernetes runtime security

Incident response

Python scripting

Infrastructure as code

Effective risk communication

Detections via code

SOAR / automation

CNAPP / CSPM tooling

DORA / ISO 27001 familiarity

Job description

Duco is seeking an experienced Senior Security Engineer (Cloud & SecOps) to own threat detection, response and prevention for our AWS-hosted SaaS platform. You will manage the SIEM and our managed SOC, define detection strategies and lead incident response while ensuring runtime security across our AWS estate.

You will work with a cross-functional team in London and Wrocław, reporting to the Head of Information Security, and collaborate with Engineering, Platform and IT to maintain strong