Senior Security Engineer – Cloud, AI & SOC 2 (Remote UK)

BibliU Ltd.; United States; Remote; USD 100,000 - 147,000; Full time

Benefits offered by this job

35 days holiday/year

Birthday off

Remote work across UK/US

Wellbeing Fridays off

Job summary

BibliU Ltd. is hiring a Senior Security Engineer to own the security posture of our platform and AI-powered workloads.

This hands-on role sits at the intersection of architecture, engineering and security, driving secure-by-default designs and robust testing across cloud and on‑premises environments. You’ll work with Engineering and our AI practice to embed security in design reviews, delivery, and compliance with SOC 2, GDPR and PCI DSS obligations.

Qualifications

• 5+ years in a security engineering, application security, or cloud security role with hands-on work
• Experience maintaining SOC 2 Type II controls in production
• Practical penetration testing skills: web apps, APIs, cloud infra
• Strong cloud security background (AWS) including IAM, encryption, secrets
• Familiarity with PCI DSS scope and data environments
• Solid understanding of GDPR in engineering contexts
• Secure architecture and threat modelling across distributed systems
• Ability to read code, write scripts, and integrate security checks in CI/CD
• Experience securing containerised workloads (Kubernetes/OpenTofu)
• Experience with AI security: prompt injection, access controls, exfiltration risks
• Exposure to ISO 27001 or multi-framework compliance programs
• Offensive security certifications (OSCP/OSWE/GWAPT) or equivalent
• Detection engineering and SIEM experience
• Familiarity with NIST AI RMF, OWASP Top 10 for LLMs

Responsibilities

• Own security controls across SOC 2 Type II and audits with IT teams
• Partner in architecture reviews, enforce secure-by-default patterns
• Design sandboxing and isolation for AI-assisted code and data flows
• Lead offensive security testing across apps, cloud, and infra
• Maintain GDPR and PCI DSS controls with Legal and Finance
• Tune SDLC security tooling: SAST/DAST, dependency and container scanning
• Lead threat modelling for high-risk services and AI features
• Improve detection, logging, alerting, playbooks, and incident response
• Support security reviews for customers and prospects with evidence
• Raise security baseline through tooling and enablement rather than gatekeeping

Skills

Security engineering

SOC 2 Type II

Penetration testing

Cloud security (AWS)

PCI DSS

GDPR

Threat modelling

CI/CD security

Incident response

AI/LLM security

Security automation

Tools

Kubernetes

OpenTofu

CI/CD tooling

Job description

BibliU Ltd. is hiring a Senior Security Engineer to own the security posture of our platform and AI-powered workloads.

This hands-on role sits at the intersection of architecture, engineering and security, driving secure-by-default designs and robust testing across cloud and on‑premises environments. You’ll work with Engineering and our AI practice to embed security in design reviews, delivery, and compliance with SOC 2, GDPR and PCI DSS obligations.