Senior Security Engineer

Senior Security Engineer - Cloud & AI Infrastructure

Location: Remote - UK, Spain or Germany

The Opportunity

We're partnering with a major international fintech that's making significant investments in cloud infrastructure, cybersecurity and emerging AI technologies. This isn't your typical security engineering opportunity.

Our client operates at scale, with a global technology footprint, complex infrastructure and an ambitious engineering roadmap. As the business continues to expand, security is becoming an increasingly important part of how it builds, operates and innovates.

They're now looking for a Senior Security Engineer to help shape the security architecture behind their next phase of growth.

You'll be working across AWS, GCP, cloud-native technologies and modern security tooling, with opportunities to explore AI-driven threat detection, intelligent automation and the security challenges emerging from AI-powered infrastructure.

This is a hands-on engineering role with the autonomy to influence technical decisions, introduce new technologies and build security solutions that scale.

What You'll Be Doing

You'll take ownership of key areas of cloud infrastructure security, partnering with platform, infrastructure and engineering teams to build secure, scalable environments.

Your responsibilities will include:

• Cloud Security: Design, implement and continually improve security architecture across AWS and GCP.
• Threat Detection & Monitoring: Develop intelligent monitoring, logging and alerting capabilities to identify and respond to security threats.
• AI & Security Automation: Explore and implement AI-assisted security tooling, automated threat detection and intelligent incident response capabilities.
• Security-as-Code: Define and enforce cloud security baselines using policy-as-code and Infrastructure as Code.
• Network Security: Architect segmentation, isolation and secure communication between cloud environments and workloads.
• Web Application Security: Design, manage and optimise WAF configurations, including AWS WAF and Google Cloud Armor.
• Zero-Trust Architecture: Implement identity-aware access controls and zero-trust security principles.
• DevSecOps: Embed security into engineering workflows through Terraform, GitOps and automated compliance pipelines.
• AI Infrastructure Security: Contribute to securing emerging AI/ML workloads, cloud-native services and evolving AI-enabled technologies.
• Engineering Collaboration: Work closely with engineering teams to ensure security is built into infrastructure from day one.

What We're Looking For

We're interested in engineers who understand cloud security at a fundamental level and enjoy solving complex infrastructure challenges.

You'll ideally bring:

• 5+ years of experience in security engineering, cloud security or infrastructure engineering.
• Strong hands-on experience securing AWS and/or GCP environments.
• Solid understanding of IAM, VPCs, network segmentation, firewalls, DNS, TLS and VPN technologies.
• Experience designing and managing WAF solutions, including AWS WAF or Google Cloud Armor.
• Strong experience with Terraform, Infrastructure as Code and automated security workflows.
• Scripting capabilities in Python, Bash or similar.
• Experience with logging, monitoring, SIEM platforms and threat detection.
• Familiarity with security frameworks including CIS, NIST and ISO 27001.
• A strong understanding of defence-in-depth and secure-by-design engineering.
• The ability to communicate technical decisions clearly and work collaboratively across engineering teams.

What Would Make You Stand Out?

We'd be particularly interested in speaking with engineers who have exposure to:

• AI-powered cybersecurity tools, behavioural analytics or ML-driven threat detection.
• Security considerations surrounding LLMs, generative AI or AI/ML infrastructure.
• Kubernetes, container security and cloud-native architecture.
• Automated incident response, SOAR and security orchestration.
• Zero-trust networking, ZTNA and identity-aware access.
• Security in highly regulated fintech, banking or financial services environments.
• Compliance frameworks such as PCI-DSS, GDPR and PSD2.
• AWS/GCP security certifications or CCSP.

You don't need to tick every box. Strong cloud security fundamentals, engineering curiosity and a passion for automation are what matter most.

Applicants must have the appropriate right to work in their country of employment and be able to complete relevant background and regulatory checks.