Cloud Security Engineer

We're partnered exclusively with a Fintech business in Cheltenham, who've spent the last 10 years building their own SaaS product suite. They've recently migrated to GCP - still with some AWS presence - and now security is firmly at the top of the agenda as they settle into the new environment and scale. They're a 300-person business - still at a size where you can actually make a difference, but big enough to have real structure and a decent security budget. The team is growing, the product is doing well, and they want someone who wants to get stuck in rather than just maintain what's already there. You'll be working closely with their DevOps and Platform teams, helping embed security across their cloud environment. Think cloud posture management, network security, identity and access controls, and making sure their SaaS infrastructure stays tight as they scale.

• Solid hands-on experience with GCP, with some AWS exposure also useful
• Cloud security posture management - Prisma Cloud, Wiz, Google Security Command Center, or similar
• Network security in cloud environments - VPCs, security groups, firewalls, WAFs
• Experience securing Kubernetes workloads and container environments (GKE experience a plus)
• IaC security (Terraform, CloudFormation) - spotting misconfigs before they hit production
• Knowledge of compliance frameworks relevant to Fintech - PCI-DSS, ISO 27001, SOC 2
• Cloud-native logging and monitoring - Google Cloud Logging, Chronicle, or similar
• Someone who's comfortable working across engineering teams, not just sat in a silo