Senior Cloud Security Engineer - Platform Security Lead

Femtech Insider Ltd.; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Paid holidays and sick leave

Sabbatical after 5 years

Flo Premium for friends & family

Learning support and professional成长

Job summary

Flo is the world’s leading women’s health and digital health platform, embedding security by design as we scale. We are seeking an experienced Cloud Security Engineer to join the Velocity team and ensure secure-by-default infrastructure across cloud, containers, and pipelines.

The role requires deep AWS security expertise, Terraform/Terragrunt proficiency, and a strong automation mindset to drive secure software delivery at scale.

Qualifications

• 7+ years in Infrastructure Security, Cloud Security, or Security Engineering roles.
• Deep expertise in AWS security services and best practices.
• Infrastructure as Code with Terraform and Terragrunt.
• Strong knowledge of Kubernetes security, image hardening, and admission control.
• Identity management principles: SSO, OAuth, JWT, SAML.
• Automation mindset; ability to script in Python, Bash, or similar.
• Network security fundamentals and practical application.
• SSDLC: integrating secure development lifecycle into workflows.

Responsibilities

• Embed security into the platform by baking security into core stack and making it invisible to developers.
• Automate security across infrastructure, CI/CD pipelines, and container lifecycles.
• Own and strengthen Flo's AWS security posture using GuardDuty, Inspector, Security Hub, and SSM Patch Manager.
• Harden container image security end-to-end; patch vulnerabilities automatically and verify images with Cosign/Sigstore.
• Manage policy-as-code for CI/CD security with Kyverno, Checkov to enforce standards programmatically.
• Build security observability with dashboards and metrics using Databricks or Looker.
• Support high-scale privacy features and nurture Flo's security culture through collaboration.

Skills

Cloud security

AWS security

Infrastructure as Code

Container security

IAM & SSO

Automation scripts

Network security

SSDLC

Tools

Terraform

Terragrunt

Kubernetes security

Cosign/Sigstore

Kyverno

Checkov

GuardDuty

Inspector

Security Hub

SSM Patch Manager

Job description

Flo is the world’s leading women’s health and digital health platform, embedding security by design as we scale. We are seeking an experienced Cloud Security Engineer to join the Velocity team and ensure secure-by-default infrastructure across cloud, containers, and pipelines.

The role requires deep AWS security expertise, Terraform/Terragrunt proficiency, and a strong automation mindset to drive secure software delivery at scale.