PLATFORM SECURITY ENGINEER

PLATFORM SECURITY ENGINEER

Location: 100% Remote (Offshore, EU working-hour overlap)

Employment Type: Full-time Contractor (12-month contract, extendable)

Level: Senior

Reporting to: Principal Platform Security Engineer

Expected Start Date: ASAP

Compensation: Up to 75M Gross

About Our Client

Our client operates in the insurance sector within the London Market, developing and maintaining technology solutions that support insurance operations.

The organization works across cloud and on-premises environments, leveraging Platform Engineering, Site Reliability Engineering (SRE), and security solutions to support its technology operations.

The Role

Our client is seeking a Senior Platform Security Engineer to join its London Market Platform Engineering Chapter.

This is a hands-on role combining platform engineering, application security, and security operations. You will be responsible for designing, implementing, and automating security controls throughout the Software Development Life Cycle (SDLC), while building and maintaining secure cloud infrastructure across Azure and Google Cloud Platform (GCP).

Working closely with Innovation Squads, Engineering Chapters, and Cyber teams, you will help strengthen security practices, improve operational resilience, and embed security into engineering workflows.

Key Responsibilities

Security Integration & Automation

• Design, implement, and automate security controls and testing throughout the SDLC.
• Apply Security-as-Code principles and develop reusable security patterns and best practices.
• Provide security guidance and training to engineering teams.
• Collaborate with engineering teams to investigate application security findings, prioritize remediation, and prevent recurring vulnerabilities.

Cloud Infrastructure Security

• Build and maintain secure Azure and GCP infrastructure across environments using Terraform and Azure DevOps Pipelines.
• Implement and maintain monitoring and alerting across infrastructure, applications, and data.
• Ensure monitoring produces actionable security signals and supports secure operational practices.

Threat & Vulnerability Management

• Identify, assess, and respond to emerging security threats and vulnerabilities.
• Support vulnerability remediation and security incident management.
• Investigate suspected attacks and contribute to incident response activities.
• Participate in post-incident reviews and root cause analysis, implementing preventive measures to reduce recurrence.

Cross-Functional Collaboration

• Provide security expertise and support for technology and change initiatives.
• Work closely with Innovation Squads, Engineering Chapters, Group, other Business Units, and Cyber teams.
• Contribute to continuous improvement initiatives within an Agile working environment.

Requirements

Must Have

• Minimum 5 years of experience in DevOps or Platform Engineering, with exposure to Azure or hybrid cloud environments.
• Hands-on experience with Terraform and platform engineering solutions.
• Experience working with solutions integrating Azure and GCP.
• Experience with Azure DevOps Pipelines.
• Experience with Application Security (AppSec) tools, including CI/CD integration, alert tuning, and security finding triage.
• Knowledge of cloud-native architectures, microservices, and containerized environments.
• Understanding of full-stack application and infrastructure architecture, including security controls, high availability, and operational resilience.
• Working knowledge of vulnerability and compliance management, including security scanning and remediation tracking.
• Knowledge of patch management, endpoint protection, and anti-malware solutions.
• Understanding of Identity and Access Management (IAM) and Privileged Access Management (PAM).
• Experience or knowledge of monitoring and alerting across infrastructure, applications, and data.
• Fluent English communication skills, both written and spoken.

Nice to Have

• Additional experience with Azure DevOps.

Ideal Candidate Profile

The ideal candidate is someone who:

• Has a strong background in DevOps or Platform Engineering, with a security-first mindset and hands-on experience in cloud environments.
• Combines expertise in cloud infrastructure, application security, and security operations to deliver practical, scalable security solutions.
• Is proactive in identifying security risks, driving vulnerability remediation, and continuously improving security practices.
• Takes an automation-first approach, embedding security into development workflows and infrastructure management.
• Works effectively with cross-functional engineering and cybersecurity teams, providing practical guidance and promoting security best practices.
• Demonstrates strong problem-solving skills, ownership, and the ability to operate independently in a remote, Agile working environment.
• Communicates confidently in English and collaborates effectively with international stakeholders.

What Our Client Offers

• 100% remote working arrangement.
• Full-time engagement, 5 days per week.
• Initial 12-month contract with potential extension.
• Offshore working model with required working-hour overlap with the EU.

Interview Process

• Round 1: Technical interview directly with the client.
• Round 2: Technical interview directly with the client.

How to Apply

Interested candidates are invited to submit an updated English CV to the recruitment consultant handling this position.

All applications will be treated with strict confidentiality. The client’s identity and further company information will be shared with qualified candidates during the recruitment process.