Principal Security Engineer - Hybrid Cloud/Platform

Description

• Lead security reviews for all platform services and ensure secure-by-design delivery.
• Serve as the primary interface between Platform Engineering and the Security organisation.
• Lead technical aspects of any security incidents.
• Drive continuous improvement in security maturity, embedding best practices into design, development, and operations.
• Educate teams on emerging threats and best-practice mitigation techniques.
• Maintain clear documentation of security posture, architecture, and mitigations.
• Own the end-to-end security posture across infrastructure, networking, data, and application layers.
• Align with Security Operations, Compliance, and Risk teams regarding ISO27001, SOC2, NIST, and CIS.
• Build automation for scanning, compliance, and policy enforcement within CI/CD.
• Mentor engineers and uplift security capability across the organisation.
• Perform hands-on offensive security testing across services and infrastructure.
• Collaborate with cloud teams to ensure secure configuration across AWS, Azure, and GCP edge services.
• Own and manage vulnerability outputs from Qualys and similar tooling; prioritise remediation and drive accountability.
• Define and enforce secure coding practices across platform teams.

Requirements

• IAM (SSO, MFA, least privilege, roles)
• Strong understanding of application security, OWASP Top 10, SSRF, RCE, privilege escalation, etc.
• Experience with vulnerability management (Qualys, Tenable) and operationalising findings.
• Offensive security capability: able to exploit, assess, and harden systems across the stack.
• Hands-on DevSecOps experience embedding automation into pipelines.
• Proven experience securing large-scale multi-cloud (AWS, Azure, ideally GCP) environments.
• Networking (segmentation, firewalling, zero-trust, ingress/egress)
• Certifications (OSCP, CISSP, AWS Security Specialty) are beneficial but not essential.
• Strategic mindset with the ability to translate threat insights into engineering action.
• Data security (encryption, tokenisation, key management)
• 10+ years in cybersecurity or secure systems engineering, ideally in cloud, SaaS, or complex hybrid environments.
• Expertise across IAM, encryption, secrets management, key rotation, and zero-trust.

Benefits

• Secrets and privileged access (e.g., Delinea, Vault)
• Income protection insurance Providing you with support and assistance when you need it most
• Pension Scheme Our plan with Scottish Widows offers 5% matched contribution by the company
• MatchIt! Fundraise for a cause close to your heart and Advanced will match part of the funding
• Development Programmes From Future Managers to Leadership Training, our development programmes help you get where you need to go
• Performance & Talent Our own technology platform that allows you to get real-time feedback, conversations and goals to help you become your best self
• Annual Leave 25 days of annual leave, plus public holidays and the ability to buy additional days
• Volunteering Time Our volunteering leave scheme allows you to use your time to help those who need it
• Employee Assistance Programme Free advice, support, and confidential counselling available 24/7 through Care First
• Performance Bonus Our Group-wide bonus scheme enables you to reap the rewards of your success
• Pennies from Heaven donate the pennies from your pay check to help make a difference without lifting a finger

Training + Development

Interview process

Visa Sponsorship

Security clearance