Senior Cloud Security Engineer — Kubernetes & IaC

La Fosse; United Kingdom; On-site; GBP 90,000 - 130,000; Full time

Job summary

La Fosse is seeking a Senior Cyber Security Engineer to join a technology-driven organisation. This hands-on role focuses on securing cloud environments, containerised workloads, and software delivery pipelines.

You will collaborate with engineering and platform teams to raise security across AWS/GCP and Kubernetes-based platforms. You will design, implement and automate security controls, driving secure-by-design practices and threat modelling.

Qualifications

• Hands-on cyber security engineering experience.
• Cloud security expertise across AWS and/or GCP.
• Commercial experience securing Kubernetes environments.
• Terraform and Infrastructure-as-Code experience.
• Experience working within DevOps, Platform Engineering or Cloud Engineering teams.
• Strong understanding of threat modelling and security architecture principles.

Responsibilities

• Lead security architecture reviews and threat modelling activities.
• Design and implement security controls across cloud environments.
• Secure Kubernetes-based platforms and containerised workloads.
• Build and automate security controls through Infrastructure-as-Code and CI/CD pipelines.
• Support the development of secure-by-design engineering practices.
• Partner with technical teams to identify security risks and implement effective mitigations.

Skills

Cloud security

Kubernetes security

Terraform / IaC

DevOps / Platform Engineering

Threat modelling

Security architecture

Tools

Terraform

Kubernetes

Job description

La Fosse is seeking a Senior Cyber Security Engineer to join a technology-driven organisation. This hands-on role focuses on securing cloud environments, containerised workloads, and software delivery pipelines.

You will collaborate with engineering and platform teams to raise security across AWS/GCP and Kubernetes-based platforms. You will design, implement and automate security controls, driving secure-by-design practices and threat modelling.