Cloud Security Engineer

The role

A Cloud Security Engineer will provide security expertise and mentorship to engineering teams. You will design and build cloud native controls, develop security tooling, and perform security reviews.

What you will do

• Provide security expertise and mentorship to engineering teams through planning, design, and testing
• Build and maintain automation to audit and assess infrastructure-as-code and in-place infrastructure
• Design and build cloud native preventative and detective controls that operate at scale
• Co-develop threat models with engineering teams
• Develop security tooling in code and contribute to third-party security products
• Work with cloud engineering and operations teams to develop tooling for production
• Perform security reviews and security testing
• Contribute to the overall security strategy and security tooling selection
• Operate collaboratively with other teams

Required qualifications

• Familiarity with building and deploying containerised applications in public cloud using CI/CD frameworks and infrastructure automation
• Knowledge of cloud networking architecture, cloud operations, security, automation and orchestration
• Familiarity with performing security threat modelling and design reviews
• Knowledge of security in distributed systems
• Familiarity with good security practices with containers and Kubernetes
• Experience with languages such as Go, Python, or other modern programming languages
• Coding experience in the creation, automation, and integration of security tools
• Experience in version control systems such as Git
• Experience with designing, developing, and maintaining security in public cloud environments such as AWS and GCP
• Strong interpersonal and communication skills

Nice to have

• Existing experience building and operating distributed systems at scale
• Awareness and experience with well-architected cloud security frameworks or CSA-CCM
• Contributions to the security community (public research, blogging, presentations, etc)
• Experience in performing web application penetration testing and security tooling
• Experience developing tools and interacting with cloud provider APIs

Benefits

• industry's most generous employee share package

About the company

Thought Machine develops core and payments technology that runs natively in the cloud to rid banks of legacy technology. The company has more than 550 individuals across offices in London, New York, Singapore, Sydney and Lisbon.