Senior Security Architect: Cloud, SIEM & Incident Response

ESL FACEIT Group - EFG; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

EFG (ESL FACEIT Group) in London is seeking a Senior Security Engineer to lead the evolution of the group’s information security posture. You will architect and oversee security tooling, platforms, and frameworks across the organization, driving high-impact outcomes through automation and strategic resource allocation.

You will own vulnerability management, secure software development lifecycle practices, and incident response.

Qualifications

• Extensive experience architecting and deploying security at scale.
• Translate policies into enforceable technical standards.
• Experience with cloud platforms and container security.
• Strong automation and scripting capabilities.

Responsibilities

• Architect and oversee deployment of advanced security monitoring frameworks.
• Lead security in CI/CD pipelines with security-as-code practices.
• Own end-to-end vulnerability and risk management across infra and apps.
• Design security infrastructure (EDR, IAM, DLP) with SOAR to automate controls.
• Lead incident response and post-incident roadmaps to prevent recurrence.
• Coordinate internal security audits and ensure regulatory alignment.
• Advise on security during major initiatives and vendor risk reviews.
• Mentor engineers and standardize SOPs and runbooks.

Skills

Security architecture

Threat modeling

Cloud security AWS/GCP

DevSecOps

Automation scripting

Incident response

Vulnerability management

Governance & compliance

Mentorship

Tools

AWS

GCP

Kubernetes

Terraform/CloudFormation

SOAR

SIEM

Job description

EFG (ESL FACEIT Group) in London is seeking a Senior Security Engineer to lead the evolution of the group’s information security posture. You will architect and oversee security tooling, platforms, and frameworks across the organization, driving high-impact outcomes through automation and strategic resource allocation.

You will own vulnerability management, secure software development lifecycle practices, and incident response.