Software Engineer - Cloud Security

Harvey Nash Group; Greater London; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A leading investment management company is seeking a Cloud Security Engineer to design and build secure, cloud-native platforms. You'll contribute to modern authentication solutions within a new cybersecurity team, providing real ownership of security architecture. This hybrid role offers the flexibility of working from London or Manchester and requires strong skills in AWS, TypeScript, and secure API design.

Qualifications

• Experience with AWS and Infrastructure as Code (IaC).
• Strong skills in TypeScript and JavaScript development.
• Knowledge of designing secure REST APIs with a focus on security.

Responsibilities

• Design and build secure cloud-native platforms.
• Contribute to modern authentication and security solutions.
• Work within a new cybersecurity team impacting security architecture.

Skills

AWS cloud engineering with IaC

TypeScript/JavaScript with Node.js

Designing secure REST APIs

Working with cloud security tooling

Tools

CloudFormation

Terraform

Next.js

Job description

Software Engineer (Cloud Security) - Investment Management - Permanent - London OR Manchester - Hybrid

About the role

As a Cloud Security Engineer, you'll help design and build secure, cloud-native platforms that protect client identities and access at scale. Working within the Enterprise Security & Fraud team, you'll contribute to modern authentication and security solutions used across the UK and Europe. This role sits in a newly formed cybersecurity team, offering real ownership and impact on security architecture and standards.

Required Skills

• AWS cloud engineering with IaC (CloudFormation, CDK, Terraform)
• Building and consuming services using TypeScript/JavaScript with Node.js (exposure to Nest JS and microservices is a plus)
• Designing secure REST APIs with strong foundations in IAM, networking, and encryption.
• Working across a modern stack including AWS, CloudFormation, Node.js, Next.js, Auth0, and cloud security tooling.