Senior Security Engineer

LT Harper Group; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Private medical insurance

Healthcare cashback

Life assurance 4x salary

Unlimited annual holiday

Family leave

Job summary

LT Harper Group is seeking a Senior Security Engineer (Cloud and SecOps) in London, a hybrid role with 2 days weekly in-office. You will own threat detection, response and prevention for an AWS-hosted SaaS platform used by major banks, leading incident response and AWS runtime security initiatives.

You’ll join a small security team across London and Poland, working with GRC and a Senior Product Security Engineer, with a focus on SIEM, SOC management, and automated security processes.

Qualifications

• Experience in security operations or cloud security engineering, including incident response in cloud.
• Hands-on SIEM work and tuning of detections with response to alerts.
• In-depth AWS security knowledge (IAM, SCPs, GuardDuty, CloudTrail, Security Hub).

Responsibilities

• Own the SIEM, onboard log sources, tune detections and track MITRE ATT&CK coverage.
• Manage the managed SOC, runbooks, service reviews, triage quality and SLAs.
• Lead end-to-end incident response from triage to root cause analysis.
• Own AWS runtime security, IAM, guardrails, logging coverage and corporate estate security.
• Run vulnerability management, external attack surface and pen testing.
• Automate security processes with scripting and infrastructure-as-code.

Skills

Security operations

Cloud security

Incident response

Python scripting

Infrastructure as code

MDR management

Tools

AWS

Kubernetes

Job description

Senior Security Engineer (Cloud and SecOps) | London, Hybrid

You’ll own threat detection, response and prevention across an AWS-hosted SaaS platform used by some of the world’s largest banks. That means the SIEM, the managed SOC relationship and the run-time security of the AWS estate, with you leading the response when incidents happen.

• Salary: competitive, plus annual performance bonus
• Location: London, hybrid (2 days a week in the office)
• Level: Senior, reporting to the Head of Information Security

You’ll join a small Information Security team across London and Poland at an enterprise SaaS company, working alongside GRC and a Senior Product Security Engineer.

Senior Security Engineer - What you’ll actually do:

• Own the SIEM: onboard log sources, build and tune detections, and track coverage against MITRE ATT&CK
• Act as internal owner of the managed SOC, including runbooks, service reviews, triage quality and SLAs
• Lead incident response end to end, from triage and containment to root cause analysis
• Own AWS run-time security, including IAM, organisational guardrails and logging coverage, and secure the corporate estate (Google Workspace, endpoints, SaaS apps)
• Run infrastructure vulnerability management, external attack surface management and penetration testing
• Automate security processes with scripting and infrastructure-as-code

Senior Security Engineer - What you’ll need:

• Security operations or cloud security engineering experience, including leading incident response in cloud environments
• Hands-on SIEM work, designing and tuning detections as well as responding to alerts
• In-depth AWS security knowledge: IAM, Organizations and SCPs, CloudTrail, GuardDuty, Security Hub, KMS and VPC design
• Container and Kubernetes runtime security, ideally on Amazon EKS
• Experience working with or managing a managed SOC or MDR provider
• Python or similar scripting, plus working knowledge of infrastructure-as-code

Nice to have:

• Detection-as-code, SOAR or automated response playbooks
• CSPM or CNAPP tooling
• Familiarity with DORA, ISO 27001 and SOC 2
• AWS Certified Security Specialty, GCIH, GCIA or GCFA

What’s in it for you

• Private medical insurance, healthcare cashback scheme and 4x salary life assurance
• Unlimited annual holiday and enhanced family leave
• Work abroad for up to 6 weeks a year
• Learning and development budget, 4 volunteering days, Cycle to Work and Tech Scheme

If you meet most but not all of the essentials, we’d still like to hear from you.