Senior Lead Cloud Security Engineer

Salary: £68,000 - 108,000 per year

Requirements:

• We require 7+ years of experience in Infrastructure Security, Cloud Security, or Security Engineering roles.
• We need deep expertise in AWS security services and best practices.
• We expect proficiency in Terraform and Terragrunt, with an infrastructure-as-code approach.
• We need strong knowledge of Kubernetes security, image hardening, and admission control.
• We require a solid understanding of identity management principles, including SSO, OAuth, JWT, and SAML.
• We expect comfort scripting in Python, Bash, or similar to automate security workflows.
• We need an understanding of modern network security principles and their practical application.
• We require experience building Secure Software Development Lifecycle phases into engineering workflows.
• Bonus points include experience with security monitoring and event correlation systems, Zero Trust Architecture, secret management, multi-cloud environments, business continuity principles, and professional accreditations such as AWS Security Specialty, CKS, or CISSP.

Responsibilities:

• We own and continuously strengthen our AWS security posture using tools like GuardDuty, Inspector, Security Hub, and SSM Patch Manager.
• We harden container image security end-to-end, including automatic vulnerability patching with Copacetic, image signing and verification with Cosign/Sigstore, and policy enforcement at admission with Kyverno.
• We manage CI/CD security across the organisation using policy-as-code tooling such as Kyverno and Checkov.
• We build visibility into security performance by measuring and visualising actionable metrics using tools like Databricks Dashboards or Looker.
• We support the infrastructure for high-scale privacy features, including our TIME-recognised Anonymous Mode.
• We shape our broader security culture through proactive engagement, documentation, and cross-team collaboration.
• We embed security, compliance, and best practices into our core platform so they are invisible to developers and impossible to skip.
• We drive security-as-code across infrastructure, CI/CD pipelines, and container lifecycles to remove manual gates.

Technologies:

• AWS
• Bash
• CI/CD
• Cloud
• Databricks
• Support
• JWT
• Kubernetes
• Looker
• Network
• OAuth
• Python
• SAML
• Security
• Terraform
• AI
• GCP

More:

We are Flo, the worlds #1 health & fitness app and a mission-led company focused on building a better future for female health. Backed by a $200M investment led by General Atlantic, we reached a $1B valuation in 2024 and continue to grow at scale with 500M+ downloads, 80M+ monthly users, and 7M paid subscribers. We are hiring a Cloud Security Engineer to join Velocity, our Internal Platform team, where we build and own the cloud infrastructure, developer tooling, and SRE practices that everything else runs on. We work in a hybrid model with 3 days per week in the office and offer competitive salary, annual reviews, performance incentives, paid holiday, sick leave, female health leave, enhanced parental leave, professional growth support, a 5-week fully paid sabbatical at 5-year Floversary, and Flo Premium for friends and family, plus additional health, pension, and wellbeing perks. We are a product-driven team that moves fast, takes ownership, and values craft, collaboration, and impact, and we are proud to be an equal opportunity employer.

last updated 34 week of 2026