Senior Platform Security Engineer - Cloud & DevOps

Hiscox AG; York and North Yorkshire; Hybrid; GBP 47,000 - 87,000; Full time

Job summary

Hiscox is seeking a Permanent Principal Platform Security Engineer for the London Market, with responsibility across Platform, DevOps, and SRE domains in a cloud-first environment. The role welcomes senior engineers based in York, Lisbon, or London and emphasizes continuous improvement and secure-by-design delivery across cloud and on‑prem platforms.

The role requires proven hands-on software delivery experience, strong collaboration with security teams, and the ability to guide multiple squads

Qualifications

• 5+ years of DevOps or Platform Engineering experience delivering solutions in Azure and/or GCP.
• Full-stack application and infrastructure solution design experience, with robust security controls, high availability, and operational resilience.
• Working knowledge of vulnerability and compliance management, patch management, endpoint protection or anti-malware, and access control management, including driving findings to closure.
• Working knowledge of threat modelling and risk assessment applied to cloud architectures and CI/CD pipelines.
• Experience with AppSec tooling, including CI/CD integration, tuning to reduce noise, and triaging results with engineers.
• Strong leadership skills, including the ability to educate others and delegate responsibilities across chapters and teams.

Responsibilities

• We coach and mentor chapter members and support the Head of Platform Engineering with overall chapter management, particularly across partner resources.
• We design, implement, and automate security controls and security testing within the SDLC.
• We lead application security practices, ensuring secure design and build, and coordinate effectively between engineering and security teams.
• We apply Security-as-Code principles by providing training, creating reusable patterns, and establishing best practices for teams.
• We support the investigation and future implementation of agentic workflows and agents, ensuring proposed solutions are secure by design and comply with our AI governance.
• We respond swiftly to new and emerging security threats and vulnerabilities, investigate suspected attacks, and help manage security incidents, including post‑incident reviews.

Skills

Azure

GCP

CI/CD

DevOps

Security

Cloud

Microservices

IAM

Tools

Terraform

Job description

Hiscox is seeking a Permanent Principal Platform Security Engineer for the London Market, with responsibility across Platform, DevOps, and SRE domains in a cloud-first environment. The role welcomes senior engineers based in York, Lisbon, or London and emphasizes continuous improvement and secure-by-design delivery across cloud and on‑prem platforms.

The role requires proven hands-on software delivery experience, strong collaboration with security teams, and the ability to guide multiple squads