Security Engineer
Primary stack
Job description
About the Position
Security Engineer
We are seeking a Security Engineer to support security operations and application security for a cloud-based SaaS platform. The role focuses on practical security improvements across cloud configuration, identity, vulnerability management, secure SDLC, incident response, and compliance evidence.
About the Project
The environment includes AWS or Azure cloud services, CI/CD pipelines, containerised applications, SAST/DAST tooling, dependency scanning, SIEM/logging tools, IAM, and collaboration with engineering teams. The role requires strong spoken English for security discussions, risk explanation, and communication with international stakeholders.
Responsibilities
- Support cloud and application security reviews for SaaS environments and engineering workflows.
- Run vulnerability management processes across applications, containers, dependencies, and cloud resources.
- Work with developers on secure coding practices, threat modelling, and remediation planning.
- Review IAM, secrets management, access controls, logging, and cloud security configurations.
- Integrate or maintain SAST, DAST, dependency scanning, and container scanning in CI/CD pipelines.
- Support incident response activities, security monitoring, evidence collection, and post-incident improvements.
- Contribute to policies, security documentation, audit evidence, and compliance readiness.
Requirements
- 3+ years of commercial experience in security engineering, application security, cloud security, or security operations.
- Good understanding of web application security, OWASP Top 10, authentication, authorisation, and secure API design.
- Experience with AWS or Azure security controls, IAM, networking, logging, and secrets management.
- Experience with vulnerability scanning, SAST/DAST, dependency scanning, and remediation tracking.
- Understanding of incident response, security monitoring, risk assessment, and practical compliance evidence.
- Ability to work constructively with engineering teams and translate risks into actionable fixes.
- Strong spoken English - B2+ or higher for explaining security issues and recommendations to international teams.
Nice to Have
- Experience with SOC 2, ISO 27001, GDPR/UK GDPR, or vendor security questionnaires.
- Experience with SIEM tools, Wazuh, Sentinel, Splunk, Datadog, or cloud-native monitoring.
- Experience with Kubernetes security, container hardening, or secrets management platforms.
- Security certifications are welcome but not a replacement for practical engineering judgement.
Technologies
- Amazon Web Services (AWS)
- Microsoft Azure
- IAM
- SAST/DAST
- SIEM
- CI/CD
- Docker
- Kubernetes
- Splunk
- Sentinel
We Offer
- Opportunity to work in a dynamic and innovative environment.
- Competitive salary package.
- Flexible working hours and remote work options.
About the Company
If you prefer practical security improvements over paperwork-only security and enjoy working closely with engineers, we would be glad to hear from you. Send us your CV and we will contact you to discuss relevant opportunities.
© Infinity Technologies. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
Infinity Technologies, headquartered in London, specializes in creating global R&D hubs to help businesses achieve their goals. Promoting fully remote teams and a lean approach, we eliminate unnecessary office costs, sales, marketing expenses, and overheads for our customers. Our innovative fractal model ensures each R&D hub functions as a self-contained ecosystem tailored to the unique needs of each customer, acting as an extension of their team to develop products, maintain services, or execute strategic objectives.We leverage over 20 trademarked frameworks for building teams, developing software products, and designing outsourcing strategies, focusing on startups andmid-sizedcustomers. Our goal is to help them globalize their R&D efforts efficiently. Infinity Technologies also maintains a library of reusable components, enabling rapid prototyping, idea validation, and faster time to market—all while reducing costs. Since 2003, we have built 81 R&D hubs and currently operate 12 active hubs with distributed teams in 21 countries.With our expertise in cost-effective practices, economies of scale, and lean methodologies, Infinity Technologies empowers businesses to innovate, grow, and succeed in a global marketplace.
