Senior Cloud Security Engineer (Kubernetes)

Broster Buchanan; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading tech company is seeking a Senior Cloud Security Engineer to work remotely. This role involves building and managing defensive security controls while advising engineering teams on security features. The ideal candidate will have expertise in Kubernetes, strong proficiency in Linux, and a solid understanding of cloud security practices. Candidates should be comfortable with threat modeling and participate in an on-call rota for critical incidents. Competitive compensation and full remote flexibility are offered.

Qualifications

• Experience with Kubernetes and multi-cluster environments.
• Familiar with cloud security features and practices.
• Background in software engineering and good engineering practices.

Responsibilities

• Build and run defensive security controls for multi-cloud payment systems.
• Advise engineering teams on beneficial security features.
• Participate in an on-call rota for security tooling failures.

Skills

Kubernetes security expertise

Linux command line

Software engineering principles

Threat modeling

Confident presentation skills

Tools

AWS

GCP

Azure

Terraform

Golang

Job description

Senior Cloud Security Engineer - KUBERNETES

REMOTE

Permanent

Our client has revolutionised the world of payments with their cutting‑edge technology and innovative solutions. You will join a team of defensive security engineers directly maintaining and expanding security controls as well as advising the wider platform and application engineers within the R&D team. The team report into the CISO and work alongside the other functional pillars of InfoSec.

Role

You will build and run defensive security controls for highly‑available multi‑cloud payment systems running the latest technology. You will understand current threats, exploitation paths and risk tradeoffs in order to advise engineering teams on beneficial security features as well as prioritise management of defensive controls.

Essential

• You live on the linux command line
• Your current research and experience back up your opinionated views on security practices and tradeoffs, which you love to openly debate and willingly share
• You're sought after for your Kubernetes security expertise and have developed complex heavily customised multi-cluser environments
• Your security expertise extends to at least one public cloud, including essential security features and long‑term security hardening practices
• You appreciate building systems with good engineering practices and may have a background in software engineering at scale
• You're open to being a part of an on‑call rota, ready to respond if we have a severe, platform‑impacting security tooling failure or need second‑line security incident response assistance

Desirable

• You have an interest in offensive security, potentially including participation in CTFs and past experience as a red team operator or pen tester
• You've developed security configurations in multiple public and private clouds
• You're a confident presenter and have accelerated appreciation of security across engineering teams
• You regularly support building and analysis of threat models using a well defined process
• You have experience securing data centers and networking devices
• You're terrified by supply chain and CI / CD security, but have good patterns for reducing the risks
• Your engineering experiences include Golang and Terraform

Technologies

• AWS, GCP, Azure and private Data Centers
• Kubernetes, Helm, Flux
• Distributed systems, mostly Golang based with CockroachDB and NATS
• SIEM / SOAR, EDR, CNAPP, and a suite of open source tools with custom integrations

This is a fully remote role, please email your CV to apply