Senior Security Engineer

Gremlin LTD.; United Kingdom; Remote; GBP 90,000 - 130,000; Full time

Job summary

Gremlin LTD. is seeking a seasoned Security Engineer to lead security across client engagements, from threat modelling to cloud infrastructure hardening and compliance.

You will design AWS security architectures, integrate automated scanning into CI/CD and mentor teams on best practices, ensuring real security that works rather than checkbox exercises.

Applicants should have 5+ years in security, hands-on AWS expertise, and experience with SOC2/ISO27001 frameworks.

Qualifications

• 5+ years of security engineering or InfoSec experience.
• Strong knowledge of cloud security and threat modelling.
• Experience building secure architectures on AWS.
• Ability to integrate security into CI/CD pipelines.

Responsibilities

• Conduct security assessments and penetration testing for client environments
• Design and implement security architectures on AWS
• Build automated security scanning into CI/CD pipelines
• Advise clients on compliance frameworks (SOC2, ISO 27001, Cyber Essentials)
• Develop security policies, runbooks, and incident response plans
• Mentor the team on security best practices
• Lead threat modelling sessions with client engineering teams

Skills

Security engineering

InfoSec experience

Threat modelling

CI/CD security

Cloud security architecture

Tools

GuardDuty

Security Hub

IAM

KMS

Job description

You’ve seen enough misconfigured IAM policies to last a lifetime. We need someone who can fix them and make sure they stay fixed. You’ll lead security across our client engagements, from threat modelling to cloud infrastructure hardening, application security, and compliance. No theatre, no ticking boxes. Real security that works.

What you’ll do

• Conduct security assessments and penetration testing for client environments
• Design and implement security architectures on AWS
• Build automated security scanning into CI/CD pipelines
• Advise clients on compliance frameworks (SOC2, ISO 27001, Cyber Essentials)
• Develop security policies, runbooks, and incident response plans
• Mentor the team on security best practices
• Lead threat modelling sessions with client engineering teams

What we’re looking for

• 5+ years of security engineering or InfoSec experience
• Deep knowledge of AWS security services (GuardDuty, Security Hub, IAM, KMS)
• Experience with container security (image scanning, runtime protection, network policies)
• Familiarity with IaC security (tfsec, Checkov, or similar)
• Understanding of OWASP Top 10 and application security fundamentals

Nice to have

• Relevant certifications (AWS Security Specialty, CISSP, CISM, CEH)
• Experience with SIEM platforms (Splunk, Elastic, or AWS-native)
• Penetration testing or red team experience
• Kubernetes security (OPA/Gatekeeper, Falco, network policies)
• Incident response and forensics experience

What we won’t ask you to do

• Produce security reports designed to terrify rather than inform
• Say yes to everything because the deadline is tight
• Sit in meetings where nobody understands what you’re talking about (we listen)
• Pretend a checkbox exercise counts as security