Senior Cloud Security & SIEM Engineer

Duco; United Kingdom; Remote; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Private Medical Insurance - Enel Med

Life Insurance

Multisport Program

Unlimited annual holiday

Job summary

Duco is seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team in London. You will own detection, response, and prevention across our AWS-hosted SaaS platform, manage SIEM and our SOC relationship, and lead run-time security for the AWS estate.

You will collaborate with GRC, Engineering, and IT, shaping the detection strategy and ensuring strong security controls, incident response, and risk reporting.

Qualifications

• Proven experience in security operations or cloud security engineering.
• Hands-on SIEM experience: design and tuning of detections, alert handling.
• In-depth knowledge of AWS security services and architecture (IAM, SCPs, CloudTrail, GuardDuty, Security Hub, KMS, VPC).
• Experience with container/runtime security, preferably on Amazon EKS.
• Led security incident response within cloud environments.
• Experience with managed SOC or MDR providers.
• Familiarity with CSPM/CNAPP tooling and SOAR platforms.

Responsibilities

• Own the run-time security posture of the AWS environment, including IAM, guardrails, logging coverage and remediation of findings.
• Secure the corporate environment, including Google Workspace, endpoints, and SaaS apps, with identity and device security standards.
• Lead the infrastructure vulnerability management programme and drive remediation with Platform and IT teams.
• Coordinate external security testing from scoping to remediation closure.
• Own the SIEM platform, develop and tune detections, and track MITRE ATT&CK coverage.
• Manage the monitored SOC relationship, SLAs, and incident response end-to-end.
• Automate security processes through scripting and infrastructure-as-code, deliver security metrics for risk reporting.
• Support audits and client assurance by evidencing control effectiveness.

Skills

SIEM

Cloud security

Incident response

Threat detection

Python scripting

Infrastructure as code

Threat intelligence

Communication to non-tech

SOAR / security automation

Tools

AWS security services

Kubernetes (EKS)

IAM / SCPs

CloudTrail / GuardDuty / Security Hub

Job description

Duco is seeking an experienced Senior Security Engineer (Cloud & SecOps) to join our Information Security team in London. You will own detection, response, and prevention across our AWS-hosted SaaS platform, manage SIEM and our SOC relationship, and lead run-time security for the AWS estate.

You will collaborate with GRC, Engineering, and IT, shaping the detection strategy and ensuring strong security controls, incident response, and risk reporting.