Senior Cloud Security Engineer

Salary: £45,000 - 83,000 per year

Requirements:

• 6+ years of hands-on experience securing AWS, Azure, and GCP environments, including Azure Policy, IAM, infrastructure-as-code security, or other cloud-native tooling.
• Experience with security tools such as Microsoft Sentinel, SentinelOne, NetSkope, Flashpoint, Wiz, or similar tooling.
• Strong Microsoft Sentinel expertise, including KQL, detection rules, workbooks, and logging pipelines.
• Working knowledge of DLP and threat intelligence monitoring.
• Experience applying AI/ML to security workflows, such as automated triage, behavioural analytics, or LLM-assisted investigation.
• Understanding of AI security risks and frameworks, including OWASP LLM Top 10 and NIST AI RMF.
• Scripting proficiency in Python, PowerShell, or Bash for security automation.
• Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud.
• Nice to have: AZ-500, AWS Certified Security – Specialty, or equivalent cloud security certification.
• Nice to have: Experience integrating ATT&CK Navigator into SOC workflows.

Responsibilities:

• Secure and continuously improve our multi-cloud estate across AWS, Azure, and GCP using cloud-native tooling to keep our cloud infrastructure hardened and compliant.
• Partner with Engineering and Security Operations to make security a natural part of how we design and deliver, automating compliance checks so security scales without friction.
• Define and enforce cloud security architecture standards, guardrails, and policy-as-code aligned with industry best practices including NIST, CIS, and PCI DSS.
• Use Wiz or equivalent CNAPP/CSPM tools to continuously assess, prioritise, and drive remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI DSS benchmarks.
• Fine tune and maintain our modern SIEM platform, including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage.
• Map detection coverage against MITRE ATT&CK tactics and techniques, and identify and close visibility gaps across our cloud estate.
• Maintain alignment to PCI DSS, SOC2, ISO27001, NIST, and CIS frameworks, producing documentation and evidence to support audit and assurance activities.
• Design and implement guardrails for AI/LLM systems covering data exposure, prompt injection, and model misuse risks.
• Leverage AI and automation to enhance alert investigation, enrichment, and response workflows.
• Maintain technical policies and standards for the secure use of AI tools across our organisation.
• Lead security integration projects, guide cloud engineering teams, and drive continuous improvement across monitoring and detection.
• Apply AI to accelerate security operations and take on complex cloud security and detection engineering challenges across the organisation.

Technologies:

• AI
• AWS
• Azure
• Bash
• Cloud
• GCP
• IAM
• Support
• LLM
• OWASP
• PowerShell
• Python
• Security
• Architect

More:

Were Checkout.com, a global fintech company powering digital experiences for businesses like eBay, Spotify, Klarna, Uber, and Sony. We enable over 10 billion transactions each year for more than one billion shoppers worldwide and help ambitious businesses deliver effortless digital experiences at scale. We move fast, think globally, and hire exceptional people who want to make an impact. We have 20 offices across six continents, with our headquarters in London. This is a full-time, on-site role in London. We offer a hybrid working model with three days per week in the office, and we create an environment with real ownership, fewer blockers, and meaningful work from day one. We back each other as one team and aim to make our process accessible and supportive for everyone.

last updated 35 week of 2026