Seon
Senior Security Engineer
Europe - Remote. Posted 10 days ago
The role
You will secure a real-time fraud-prevention platform running on AWS, Kubernetes, Terraform, and GitHub. You will build automated evidence pipelines, manage IAM, and lead security assurance programmes including ISO and SOC 2.
What you will do
- Build evidence pipelines against AWS, GitHub, CI/CD and identity tooling.
- Automate access reviews across AWS IAM, Google Workspace, GitHub and core SaaS tools.
- Harden and remediate IAM at scale.
- Ship Terraform and CI guardrails.
- Take part in the team's on-call and triage rotation.
- Write and tune detections across CloudTrail, GuardDuty, WAF and Kubernetes signals.
- Validate pentest and vulnerability remediations.
- Lead ISO 27001, ISO 42001, SOC 2 and PCI DSS programmes.
- Own customer security questionnaires and vendor security reviews.
- Keep policies and the risk register current and readable.
Required qualifications
- 5+ years in security engineering with hands-on AWS experience: IAM, CloudTrail, GuardDuty, Security Hub, WAF.
- Ability to investigate an incident from the logs up.
- Working fluency in Terraform, Kubernetes and GitHub Actions.
- Python or a similar language for automating evidence collection, access reviews and alert enrichment.
- Comfort working with APIs and CI pipelines.
- Experience leading ISO 27001 or SOC 2 as the primary contact for the auditor.
- Experience with customer security questionnaires and vendor security reviews.
- Clear, concise written English for auditors, engineers and customers.
- Ability to make decisions, prioritise against a roadmap, and ask for help early.
Nice to have
- ISO 42001 or AI governance experience
- PCI DSS as a service provider
- DORA or financial-sector regulatory exposure
- Detection engineering or incident response background
- Kyverno, Linkerd or EKS security tooling
About the company
SEON is the command center for fraud prevention and AML compliance, helping companies stop fraud and reduce risk. The platform is powered by 900+ real-time, first-party data signals.