Senior Developer Experience Security Engineer

Overview

In this role you will embed security into how engineers build, deploy and operate software, making secure options the easiest path. You’ll bridge the Developer Experience and Security Operations teams to scale secure-by-default platform capabilities on our AWS-based container platform. You’ll build guardrails, automate security checks, and promote secure SD practices across CI/CD. You join a fast-growing tech team shaping a secure, observable platform that enables product teams to ship confidently.

Responsibilities

• Design, implement, and maintain secure-by-default platform capabilities (IAM patterns, network primitives, secrets management, runtime protections, encryption)
• Build automated security checks, guardrails, and visibility to continuously assess risk
• Collaborate with engineering to embed secure software development practices into CI/CD pipelines, templates, and shared tooling
• Reduce manual work (toil) through automation (scripting, workflows, tooling)
• Ensure platform-level security telemetry, logging, and monitoring as a standard capability
• Define and implement platform-wide security use cases (SIEM detections, alerts, signals)
• Work as part of a virtual SOC with the Security Operations Team for incident response
• Stay up-to-date with latest security trends and best practices
• Enable secure engineering practices through documentation, examples, platform defaults, and targeted training
• Translate security policies into practical, enforceable platform patterns and guardrails

Key requirements

• Proven experience as a Platform engineer, Developer Experience engineer, or similar role focused on enabling other engineers
• Experience with Containers and serverless with Infrastructure as code
• Good knowledge of AWS cloud security best practices and tooling
• Technical knowledge of security for networks, systems, web applications, APIs and databases
• Good understanding of secure software development practices
• Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners
• Knowledge of Mitre ATT&ck TTPs
• Knowledge of security standards and frameworks (ISO27001, NIST CSF) beneficial
• Security certifications (e.g. GCLD, Security+, AWS/GCP Security Certifications) a plus
• Excellent problem-solving and analytical skills
• Strong communication and collaboration abilities
• Location: London

• problem-solving
• analytical thinking
• strong communication
• Containers
• Serverless
• Infrastructure as code

…