Senior Cloud Security Engineer — Secure-by-Default, Scale

Flo Health Inc.; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Benefits offered by this job

Competitive salary

Annual reviews and incentive scheme

Paid holiday and parental leave

Sabbatical after 5 years

Job summary

Flo Health Inc. seeks a Cloud Security Engineer to join the Velocity Internal Platform team in a hybrid London-based role. You will embed security into the platform, automate security across infrastructure and CI/CD pipelines, and strengthen container and supply chain security at scale.

You will own cloud posture with AWS tools, implement policy-as-code, and drive security observability and privacy-focused infrastructure in a fast-growing health-tech environment.

Qualifications

• 7+ years in Infrastructure or Cloud Security or Security Engineering.
• Deep AWS security services expertise.
• Proficient with Terraform/Terragrunt as code.
• Kubernetes security, image hardening, admission control.
• Strong IAM concepts: SSO, OAuth, JWT, SAML.
• Scripting in Python/Bash to automate security workflows.
• Experience with Secure Software Development Lifecycle (SSDLC).

Responsibilities

• Embed security into the platform so developers ship securely.
• Automate security across infrastructure, CI/CD, and containers.
• Own cloud security posture with AWS tools (GuardDuty, Inspector, Security Hub).
• Harden container images and enforce policy at admission (Kyverno).
• Build security observability with metrics dashboards (Databricks/Looker).

Skills

Security engineering

AWS security

Terraform

Terragrunt

Kubernetes security

CI/CD security

Policy as code

Python scripting

Network security

SSA/SSO/OAuth/JWT/SAML

Tools

GuardDuty

Inspector

Security Hub

SSM Patch Manager

Cosign

Sigstore

Kyverno

Checkov

Databricks Dashboards

Looker

Job description

Flo Health Inc. seeks a Cloud Security Engineer to join the Velocity Internal Platform team in a hybrid London-based role. You will embed security into the platform, automate security across infrastructure and CI/CD pipelines, and strengthen container and supply chain security at scale.

You will own cloud posture with AWS tools, implement policy-as-code, and drive security observability and privacy-focused infrastructure in a fast-growing health-tech environment.