Senior Security Engineer, Cloud & DevSecOps (Hybrid)

OneView Commerce; City Of London; Remote; GBP 90,000 - 130,000; Full time

Job summary

OneView Commerce is seeking a Senior Security Engineer to lead growth and management of our InfoSec program across cloud-hosted applications and infrastructure. You will write security policy, design controls, and craft remediation plans while engaging stakeholders across engineering and leadership.

You will also own security testing standards, implement Terraform controls, and coordinate with auditors for ISO 27001 / SOC 2 style assessments. This remote-first role reports to the Sr.

Qualifications

• 7+ years in software or cloud security with a hands-on engineering background.
• Experience with cloud platforms and IaC tooling.
• Experience in security testing and software security controls.
• Familiarity with external security audits, certifications, and risk management.

Responsibilities

• Set requirements for automated threat detection, response, and remediation in cloud environments.
• Lead internal threat assessments and risk evaluations.
• Align security program with CIS Benchmarks and NIST CSF.
• Review external attack surface and remediation plans.
• Define CI/CD security gates and policy as code.
• Plan and run independent security assessments and audits.

Skills

Cloud security

Security engineering

Threat assessment

Audits & compliance

Tools

Terraform/Terragrunt

CloudFormation

CircleCI

GitHub Actions

GitLab CI/CD

Snyk

Semgrep

SonarQube

Checkmarx

Veracode

Trivy

Checkov

Splunk

Elastic

Datadog

Microsoft Sentinel

Google Security Command Center

Job description

OneView Commerce is seeking a Senior Security Engineer to lead growth and management of our InfoSec program across cloud-hosted applications and infrastructure. You will write security policy, design controls, and craft remediation plans while engaging stakeholders across engineering and leadership.

You will also own security testing standards, implement Terraform controls, and coordinate with auditors for ISO 27001 / SOC 2 style assessments. This remote-first role reports to the Sr.