Senior App & Cloud Security Engineer - AWS

Aboutus Ft; Manila; On-site; PHP 5,650,000 - 8,788,000; Full time

Benefits offered by this job

Disability confident employer

Mentorship opportunities in security

Job summary

The Financial Times is seeking a Senior Cyber Security Engineer to mature application and cloud security across its AWS-hosted tech estate. This role has an approximate 50/50 focus across application security and cloud security, working with product, platform and engineering teams to enable secure delivery by default.

You’ll shape and improve developer-friendly guardrails across CI/CD pipelines, AWS environments and IaC workflows, focusing on SAST, SCA, secret scanning, IaC scanning and

Qualifications

• Strong practical experience in application security and cloud security.
• Hands-on AWS security experience with practical remediation approaches.
• Experience improving vulnerability management across engineering teams.
• Experience improving cloud or IaC misconfiguration management at scale.
• Experience integrating or improving security tooling in CI/CD workflows (SAST, SCA, secret scanning, IaC scanning).
• Experience running threat-modelling sessions that influence design decisions.
• Ability to write scripts/tools (preferably Python) to automate security workflows.
• Strong communication and collaboration skills to influence engineers and leaders.

Responsibilities

• Improve application security guardrails for SAST, SCA, secret scanning and related controls.
• Improve cloud and IaC security guardrails to reduce misconfigurations and vulnerabilities.
• Drive vulnerability management with triage, prioritisation and remediation across teams.
• Drive cloud misconfiguration management using developer-friendly workflows.
• Run practical threat modelling for new products, features, services and changes.
• Build automation, dashboards and tooling to reduce manual effort and surface risk.
• Support security input into architecture decisions and design reviews.
• Partner with engineering to embed security into delivery and operations.
• Mentor security engineers and potentially line-manage them.

Skills

AWS security

Application security

Cloud security

Vulnerability management

Threat modelling

CI/CD security

SAST

Software composition analysis

Secret scanning

IaC scanning

Python scripting

Communication

Agile/Scrum

Security leadership

Education

AWS Certified Security – Specialty

Tools

Terraform

CloudFormation

Splunk

Job description

The Financial Times is seeking a Senior Cyber Security Engineer to mature application and cloud security across its AWS-hosted tech estate. This role has an approximate 50/50 focus across application security and cloud security, working with product, platform and engineering teams to enable secure delivery by default.

You’ll shape and improve developer-friendly guardrails across CI/CD pipelines, AWS environments and IaC workflows, focusing on SAST, SCA, secret scanning, IaC scanning and