Cloud & App Security Engineer — Hybrid + Share Options

StackOne; London; Hybrid; NOK 1,141,000 - 1,648,000; Full time

Benefits offered by this job

Share options (EMI)

Lunch budget London office

Private health insurance

Job summary

StackOne, the integration infrastructure for AI agents, seeks a Security Engineer to own cloud and product security posture as we scale. You will secure the AWS and Cloudflare estate, harden the secure SDLC, run pen testing end‑to‑end, and threat‑model features powering connectors and agent execution paths.

You’ll work hands‑on in a DevSecOps heavy role, writing production code and embedding security across CI/CD, multi‑tenant APIs, and incident response.

Qualifications

• Hands-on AWS security: IAM, KMS, networking, secrets, GuardDuty/Security Hub.
• Fluent coding in TS/Python/Go for production code.
• Application security fluency: OWASP Top 10, threat modeling, code reviews.
• Experience securing a B2B SaaS multi-tenant prod environment.

Responsibilities

• Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR blocking across every repository.
• Harden AWS and Cloudflare estate: IAM, secrets, network segmentation, KMS, WAF, GuardDuty, zero-trust patterns.
• Run end-to-end pen testing engagements with AI-driven scanners and researchers; drive fixes and retest.
• Threat-model product features before shipping: Auth provider, multi-tenant APIs, connector executions, and agent paths.
• Build detection and response around credential and authentication flows with observability to close incidents quickly.
• Partner with engineering for architecture reviews and security‑embedded code reviews.

Skills

AWS security

TypeScript

Python

Go

Application security

B2B SaaS multi-tenant

DevSecOps

Infrastructure as code

Tools

AWS CDK

Terraform

Cloudflare

Job description

StackOne, the integration infrastructure for AI agents, seeks a Security Engineer to own cloud and product security posture as we scale. You will secure the AWS and Cloudflare estate, harden the secure SDLC, run pen testing end‑to‑end, and threat‑model features powering connectors and agent execution paths.

You’ll work hands‑on in a DevSecOps heavy role, writing production code and embedding security across CI/CD, multi‑tenant APIs, and incident response.