Job Description
The ideal candidate will have worked in a small, resource-constrained team and effectively leveraged modern tooling to improve both security and developer experience.
Key responsibilities of the role include:
Designing, implementing, and improving security architecture across our application platform
Collaborating with architecture, platform and application teams to identify risks and integrate security best practices
Developing tools and controls that improve the security posture of our systems without adding friction
Keeping a business value-oriented mindset, understanding how your work adds value to the business and making that central to your decision making
Who are we looking for?
The ideal candidate will have the following skills and experience:
A strong foundation in software engineering, including extensive experience in a high-level programming language such as C#, Java, Go, Rust, or C++
A proven track record in designing and implementing secure distributed systems using modern cloud-native technologies, especially AWS and Kubernetes
Deep understanding of security principles across application, network, and infrastructure security, including secure deployments, container hardening, least privilege, and secure defaults, to enforce rigorous controls
Skilled in embedding security into CI/CD pipelines through Infrastructure-as-Code, such as Terraform and Ansible, ensuring consistent and automated security deployments across diverse systems
Hands-on experience with Zero Trust architectures, including the integration of SPIFFE standards and certificate/token-based authentication using tools such as Teleport, SPIRE or Consul
Demonstrated expertise in designing and deploying IAM/PAM solutions that leverage SSH CA, using tools like Teleport to implement secure, automated access controls
Proven experience in deploying secure Kubernetes clusters, including worker node attestation, using TPM or secure boot, and container signing, while integrating with network controls, such as firewalls and ACLs
Experience working with Security Operations Centres to deploy IDS/IPS and NDR systems, ensuring real-time monitoring and threat detection
Ability to implement comprehensive security controls, from proactive threat modelling (using frameworks like STRIDE or MITRE ATT&CK) to low-overhead in-kernel monitoring, using tools like eBPF, to balance performance, risk, and business objectives
Strong understanding of fundamental algorithms and data structures, which underpins efficient and secure software design
Why should you apply?
Highly competitive compensation plus annual discretionary bonus
Lunch provided (via Just Eat for Business) and dedicated barista bar
30 days’ annual leave
9% company pension contributions
Informal dress code and excellent work/life balance
Comprehensive healthcare and life assurance
Cycle-to-work scheme
Monthly company events
Key responsibilities of the role include:
Designing, implementing, and improving security architecture across our application platform
Collaborating with architecture, platform and application teams to identify risks and integrate security best practices
Developing tools and controls that improve the security posture of our systems without adding friction
Keeping a business value-oriented mindset, understanding how your work adds value to the business and making that central to your decision making
Who are we looking for?
The ideal candidate will have the following skills and experience:
A strong foundation in software engineering, including extensive experience in a high-level programming language such as C#, Java, Go, Rust, or C++
A proven track record in designing and implementing secure distributed systems using modern cloud-native technologies, especially AWS and Kubernetes
Deep understanding of security principles across application, network, and infrastructure security, including secure deployments, container hardening, least privilege, and secure defaults, to enforce rigorous controls
Skilled in embedding security into CI/CD pipelines through Infrastructure-as-Code, such as Terraform and Ansible, ensuring consistent and automated security deployments across diverse systems
Hands-on experience with Zero Trust architectures, including the integration of SPIFFE standards and certificate/token-based authentication using tools such as Teleport, SPIRE or Consul
Demonstrated expertise in designing and deploying IAM/PAM solutions that leverage SSH CA, using tools like Teleport to implement secure, automated access controls
Proven experience in deploying secure Kubernetes clusters, including worker node attestation, using TPM or secure boot, and container signing, while integrating with network controls, such as firewalls and ACLs
Experience working with Security Operations Centres to deploy IDS/IPS and NDR systems, ensuring real-time monitoring and threat detection
Ability to implement comprehensive security controls, from proactive threat modelling (using frameworks like STRIDE or MITRE ATT&CK) to low-overhead in-kernel monitoring, using tools like eBPF, to balance performance, risk, and business objectives
Strong understanding of fundamental algorithms and data structures, which underpins efficient and secure software design
Why should you apply?
Highly competitive compensation plus annual discretionary bonus
Lunch provided (via Just Eat for Business) and dedicated barista bar
30 days’ annual leave
9% company pension contributions
Informal dress code and excellent work/life balance
Comprehensive healthcare and life assurance
Cycle-to-work scheme
Monthly company events
💡 Quick Summary
Seeking a career-building opportunity? The Security Engineer – Core Colo Engineering position is now open for candidates interested in the IT Engineer & Developer Jobs sector. This role in London offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in IT Engineer & Developer Jobs is a plus.