Senior Cloud Security Engineer

London. Posted 2 months ago

The role

You will embed security into design decisions and ongoing operations for a multi-cloud environment. You will develop security architectures, define policy-as-code standards, and support SIEM and detection capabilities across AWS, Azure, and GCP.

What you will do

Develop and enforce reference security architectures, patterns, and blueprints for AWS, Azure, and GCP.
Conduct security assessments for new cloud services to define preventative and detective controls.
Partner with Engineering teams to embed security guardrails early in design.
Evaluate engineering and platform architecture proposals and identify security gaps.
Document and uphold secure-by-design principles and architecture governance.
Enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS.
Set monitoring scope and priorities for CNAPP/CSPM tooling.
Work with Security Operations to shape cloud logging and detection requirements.
Collaborate with senior stakeholders to articulate security risks and mitigations.

Required qualifications

Risk-based decision-making and adherence to regulatory and internal security standards (PCI DSS, NIST, SOC 2, ISO 27001, CIS).
Broad knowledge across security domains and their capabilities within AWS, Azure, and GCP.
6+ years' hands-on experience and SME depth in at least one platform.
Kubernetes (EKS/AKS/GKE).
API security.
IaC security (e.g. Terraform, CloudFormation, ARM templates).
Securing user and non-user access at scale, including Azure Policy and cloud-native IAM controls.
Ability to provide clear, security-focused guidance.
Excellent communication and senior-stakeholder engagement skills.
Experience mentoring other engineers.

Nice to have

CISSP, CCSP, or equivalent certifications.
AZ-500, AWS Certified Security, Google Professional Cloud Security Engineer, or equivalent cloud security certification.
Microsoft Certified: Azure Solutions Architect Expert, or Google Professional Cloud Architect.
Experience integrating ATT&CK Navigator into SOC workflows.

About the company

Checkout.com is a fintech company that enables over 10 billion transactions yearly for more than one billion global shoppers. They have 20 offices across six continents with London as their HQ.