Senior Security Engineer (Cloud Infrastructure)

TL;DR

Senior Security Engineer (Cloud Infrastructure): Evolving security posture across AWS and GCP environments with an accent on network security, perimeter defense, and attack surface management. Focus on designing secure network architectures, implementing policy-as-code, and driving DevSecOps adoption to protect global financial services infrastructure.

Location: Must be based in London, UK (Hybrid, 4 days in office)

Company

hirify.global is a leading fintech platform providing integrated business accounts, hedging, and financing solutions to help businesses scale globally.

What you will do

• Own cloud security posture and attack surface management across AWS and GCP environments.
• Design and maintain WAF infrastructure with custom detection rules aligned to threat models.
• Architect network segmentation and isolation strategies using zero-trust principles.
• Deliver scalable secure remote access and identity-aware controls.
• Implement Infrastructure as Code (Terraform) for security controls and automated compliance checks.
• Collaborate with platform and engineering teams to embed security best practices into cloud foundations.

Requirements

• 5+ years in security or infrastructure engineering within a regulated industry (FinTech/Banking).
• Expert-level experience with AWS and GCP security services (VPCs, IAM, Cloud-native tools).
• Proven record in WAF solution design and implementation.
• Strong background in network architecture and Infrastructure as Code (Terraform/GitOps).
• Proficiency in scripting (Python/Bash) and security monitoring/SIEM operations.
• Authorization to work in the UK is mandatory.

Nice to have

• Experience with Zero-Trust network architectures and container security.
• Knowledge of security orchestration (SOAR) and compliance (PSD2, GDPR, PCI-DSS).
• Relevant certifications like AWS/GCP Security Specialty or CCSP.

Culture & Benefits

• Competitive base salary with discretionary performance bonus.
• Dedicated budget for professional development, training, and annual conferences.
• Inclusive and diverse global team environment.
• Technical influence over critical cloud security infrastructure in a high-growth company.