Senior Cloud Security Engineer

The role

A Senior Cloud Security Engineer will lead the design and delivery of cloud native preventative and detective controls. You will provide security expertise and mentorship to engineering teams and build automation to audit infrastructure.

What you will do

• Provide security expertise and mentorship to engineering teams
• Lead the design and delivery of cloud native preventative and detective controls
• Build and maintain automation to audit infrastructure-as-code and in-place infrastructure
• Develop security tooling in code and contribute to third-party security products
• Co-develop threat models with engineering teams
• Work with cloud engineering and operations teams to develop production tooling
• Perform security reviews and security testing
• Lead complex projects to develop security capabilities, tooling, and functionality
• Contribute to the overall security strategy and tooling selection
• Operate collaboratively with other teams

Required qualifications

• Familiarity with building and deploying containerised applications in public cloud using CI/CD frameworks and infrastructure automation
• Knowledge of cloud networking architecture, cloud operations, security, automation and orchestration
• Familiarity with performing security threat modelling and design reviews
• Knowledge of security in distributed systems
• Familiarity with good security practices with containers and Kubernetes
• Experience with languages such as Go, Python, or other modern programming languages
• Coding experience in the creation, automation, and integration of security tools
• Experience in version control systems such as Git
• Experience with designing, developing, and maintaining security in public cloud environments such as AWS and GCP
• Ability to lead and encourage good design skills including creative and critical thinking, collaboration, full evaluation of options, and objective decision making
• Strong interpersonal and communication skills

Nice to have

• Existing experience building and operating distributed systems at scale
• Awareness and experience with well-architected cloud security frameworks or CSA-CCM
• Contributions to the security community (public research, blogging, presentations, etc)
• Experience in performing penetration testing and security testing
• Experience developing tools and interacting with cloud provider APIs

Benefits

• industry's most generous employee share package

About the company

Thought Machine develops core and payments technology that runs natively in the cloud to rid banks of legacy technology. The company has more than 550 individuals across offices in London, New York, Singapore, Sydney and Lisbon.