Cloud Security Engineer (DevSecOps)

Location: London, United Kingdom; hybrid with 3 days a week in the office

Company

hirify.global is a UK fintech using AI and Open Banking data to provide fair, affordable personal finance and consumer lending.

What you will do

• Design and implement cloud security architecture across AWS and GCP.
• Build and mature SOC capabilities, including detection and incident response.
• Own Microsoft Sentinel and improve SIEM/SOAR capabilities.
• Strengthen automated RBAC and identity security across AWS, Microsoft Entra, and internal systems.
• Embed security controls into GitLab CI/CD pipelines, including SAST, dependency scanning, container security, IaC reviews, and automated policy enforcement.
• Partner with engineering teams on secure architecture, deployment patterns, and pre-deployment security reviews.

Requirements

• Strong professional experience in DevSecOps and cloud security engineering.
• Strong Python development skills for automation, API integrations, and security tooling.
• Solid understanding of network security fundamentals in distributed cloud architectures.
• Hands-on experience designing security systems and responding to incidents.
• Experience with AWS, GCP, IAM, VPCs, encryption, logging, monitoring, and zero-trust security.
• Experience with infrastructure as code, GitLab CI/CD, AWS CDK, Terraform, or related security tooling.

Culture & Benefits

• Hybrid work with 3 days per week in the office.
• Equity participation.
• 25 days of annual leave plus 8 bank holidays.
• Two paid volunteering days per year and a one-month paid sabbatical after four years.
• Employee loan and free gym membership.
• Team wellness budget for group activities.