We’re partnering with a fast-growing technology company operating at the intersection of data, finance, and cloud infrastructure. Their platforms transform complex data into clean, usable intelligence for global partners, with security embedded at the core of how they build and operate.
They are now looking for a DevSecOps / Cloud Security Engineer to join their Product Engineering team and take ownership of embedding security into the engineering lifecycle.
This is a hands-on role suited to someone who believes in building security in, rather than bolting it on.
The Role
Sitting at the intersection of Engineering, Security, and Compliance, you will work closely with the Cloud Architect and Compliance Manager to strengthen and scale the company’s security posture.
You’ll combine hands-on technical work with security governance, helping to harden the cloud environment, automate controls, and support compliance initiatives.
Key Responsibilities
* Review and remediate cloud configurations against secure baseline standards
* Own and drive technical security issues end to end
* Implement and automate security controls, compliance checks, and incident response workflows
* Improve monitoring, logging, and alerting across the platform
* Participate in a production support rotation
* Manage internal IT systems, access control, and organisational security posture
* Contribute to compliance and audit documentation and evidence generation
* 2–3+ years’ experience in DevSecOps, Cloud Security, DevOps, or Platform Engineering
* Hands-on experience with at least one major cloud provider (AWS, GCP, or Azure)
* Strong experience with Infrastructure as Code (Terraform)
* Experience automating security, compliance, or operational workflows
* Comfortable working in technical English
Nice to Have
* Exposure to ISO 27001 or SOC2
* Understanding of network security fundamentals
* Experience securing and operating databases (backup, restore, monitoring)
* Experience with vulnerability management and penetration testing findings
* Familiarity with monitoring and logging stacks (Prometheus, Grafana, ELK)
What’s On Offer
* Competitive base salary plus ~10% performance bonus
* Stock options
* Private medical insurance
* Hybrid working 3 days in Bath
* Annual company offsite
* Budget for training, conferences, and professional development
What Your First Months Will Look Like
First month: deep dive into the cloud environment and security posture, quick wins, and risk prioritisation
After 3 months: operating with autonomy, compliance backlog reduced, monitoring standardised
After 6 months: full ownership of the security baseline, focus on prevention and continuous improvement
#J-18808-Ljbffr