Security Engineer *EU/UK remote* (m/f/d)

Role overview Build and operate security foundations for a cloud-based product, embedding protection into engineering workflows while keeping delivery practical. This hands-on role spans cloud and application security, automation, container hardening, vulnerability response, and compliance evidence. You will partner with engineering, product, and infrastructure teams and help make secure patterns easy to adopt.

Responsibilities - Integrate security controls throughout the software development lifecycle and developer platform. - Create automation for patching, vulnerability handling, and collection of audit evidence; build reusable infrastructure and development standards. - Secure container workloads, including cluster access and isolation, hardened base images, image provenance, admission controls, least-privilege access, and runtime monitoring. - Manage cloud security tooling and remediation workflows; support vulnerability triage, service targets, root-cause analysis, incident response, and post-incident reviews. - Perform threat modeling and architecture reviews, advise on secure design and cryptography, and maintain security documentation and internal tools. - Support evidence and controls for frameworks such as PCI DSS, ISO 27001, SOC 2, and DORA.

Requirements - At least five years in a technical security role, ideally in a cloud-native, fintech, or SaaS environment. - Strong AWS security knowledge, including services and controls for identity, keys, logging, storage, threat detection, and organization-wide policies. - Experience with DevSecOps and CI/CD security, infrastructure as code, and writing automation in Python, Bash, or TypeScript. - Practical experience securing Docker and container platforms such as ECS, EKS, or Kubernetes. - Strong application security knowledge, including OWASP risks, code review, threat modeling, SAST/DAST, attack-surface analysis, and web vulnerability testing or research. - Familiarity with cloud security platforms and vulnerability remediation at scale; able to explain security topics clearly to varied audiences.

Nice to have Exposure to compliance frameworks, detection engineering or lightweight SIEM tools, and contributions to security automation or open-source security projects.

Benefits and work setup Remote work is supported. The listing also mentions a choice of Windows or Mac, a monthly allowance for meals and coffee, development opportunities, and a collaborative team environment.