Senior Cloud Security Engineer - Hybrid & Design-Driven

Checkout.com; Greater London; Hybrid; GBP 110,000 - 160,000; Full time

Job summary

Checkout.com is scaling a multi‑cloud security architecture as part of its core platform. As Senior Cloud Security Engineer you’ll partner with Engineering, GRC, and Security Operations to embed security-by-design across AWS, Azure, and GCP, and to strengthen SIEM, guardrails, and policy‑as‑code.

You’ll lead complex cloud security challenges, set best‑practice standards, mentor engineers, and report security risks to senior stakeholders in a way that drives business decisions and resilience.

Qualifications

• 6+ years hands-on cloud security experience
• Strong knowledge across AWS, Azure, and GCP
• Experience embedding security in design and operations
• Understanding of guardrails, policy-as-code, and CIS/NIST/PCI DSS

Responsibilities

• Develop and enforce secure cloud architectures across AWS, Azure, and GCP.
• Conduct security assessments for cloud services and define preventative controls.
• Embed security guardrails early in design with engineering teams.
• Evaluate proposals for security gaps and drive remediation to completion.
• Document and uphold secure-by-design principles and governance.
• Define monitoring scope for CNAPP/CSPM tooling and prioritize misconfigurations.
• Shape cloud logging and SIEM requirements with Security Operations.
• Communicate risks and mitigations to senior stakeholders.

Skills

Kubernetes

Cloud security

IAM controls

Policy governance

Stakeholder comms

Mentoring

Regulatory standards

Tools

Terraform

CloudFormation

ARM templates

Wiz

Job description

Checkout.com is scaling a multi‑cloud security architecture as part of its core platform. As Senior Cloud Security Engineer you’ll partner with Engineering, GRC, and Security Operations to embed security-by-design across AWS, Azure, and GCP, and to strengthen SIEM, guardrails, and policy‑as‑code.

You’ll lead complex cloud security challenges, set best‑practice standards, mentor engineers, and report security risks to senior stakeholders in a way that drives business decisions and resilience.