Infrastructure Security Engineer

We are looking for a Senior Security Engineer, Infrastructure & Reliability to lead by example and drive technical discussions across engineering teams. In this hands-on hybrid role, you will build scalable security guardrails and automation across cloud, CI/CD, and developer platforms—combining SRE and security disciplines to protect our global stack and support proactive threat defense.

Our day-to-day work is interesting and dynamic, driven by a focus on proactive threat actor identification and in-depth investigation of security issues. These practices are key to ensuring strong product security and fostering continuous, iterative improvement.

WHAT YOU WILL DO:

• Design, implement, and automate security controls across GCP and our wider infrastructure, focusing on least-privilege access and leveraging Terraform, policy-as-code, and CI/CD pipelines to prevent misconfigurations, detect configuration drift, and continuously enforce security baselines.
• Partner closely with SRE teams to establish cloud-native deployment workflows, enforcing explicit CI/CD gates, approval flows, artifact provenance, and build security.
• Partner with SRE to harden and manage the security posture of global networking infrastructure, corporate VPN, and perimeter tooling (e.g., Cloudflare) to prevent unauthorized exposure.
• Design and deploy internal tooling to support the SOC and Security Engineering teams.
• Conduct threat modeling, design reviews, and architectural assessments for new and existing systems.
• Maintain internal security documentation, standard operating procedures, and developer best-practice guidance.
• Provide specialized infrastructure, cloud, automation, and CI/CD support during incident response operations and threat investigations.

WHAT YOU WILL NEED:

• 4+ years of experience in Security Engineering, Platform Security or SRE/DevOps, with demonstrated ownership of security controls in production environments.
• Ability to assess infrastructure security risks, conduct threat modeling and security design reviews, and translate findings into practical, scalable engineering controls.
• Hands-on experience implementing security controls and automation in cloud environments (GCP preferred).
• Experience designing secure CI systems and workflows, dealing with artifact provenance, approval flows, and code protection (GitHub Actions preferred).
• Solid understanding of network-level security protocol concepts and mitigations (TLS, HTTPS, network segmentation).
• Proficiency in Infrastructure as Code (Terraform) and modern scripting/automation languages (Python, Bash, or Go).
• Strong analytical and problem-solving skills, with a bias toward automation over manual workflows and clear cross-team communication.
• Familiarity with perimeter and monitoring tooling (e.g., Cloudflare/WAF, SIEM, Wazuh/HIDS, EDR, and incident-management platforms).

NICE TO HAVE

• Knowledge of security standards and governance frameworks (e.g., CIS Benchmarks, NIST, SOC2, ISO 27001, PCI DSS) and how to operationalize them.
• Hands-on experience building and maintaining a SIEM comprised of open-source and hosted components.
• Experience securing consumer-facing web and iOS/Android applications.
• Experience designing secrets policies and administering Vault or other HashiCorp products.
• Proven track record of managing security vendor relationships and technical deliverables.
• Hands-on experience administering secrets management platforms (e.g., HashiCorp Vault), including secret rotation and lifecycle automation.

COMPENSATION & PERKS

• Full-time salary based on experience and meaningful equity in an industry-leading company
• This is a role based in our London office, with a mandatory in-office presence four days per week.
• Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.
• ClassPass
• Unlimited vacation policy; work hard and take time when you need it
• Apple equipment
• The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field
• Flexible work culture