Platform Security Engineer

• Secure‑by‑design applications and services

• Safe, reliable and automated releases (working towards full CI/CD)

• Strong detection, response and observability

• A culture where security is shared, understood and championed

• Google Cloud security fundamentals: IAM, VPC design, Cloud Armor, Secrets, KMS

• Cloudflare: WAF, Zero Trust, Access, DNS, Bot Management

• Infrastructure‑as‑Code security: Terraform, policy‑as‑code, secure pipelines

• Container & Kubernetes security: GKE, admission controls, image scanning, RBAC

• Experience mitigating real‑world security threats and vulnerabilities

• Understanding of DevSecOps best practice and secure SDLC

• Familiarity with CI/CD systems such as GitHub Actions and securing build pipelines

• Monitoring & alerting: Prometheus, Grafana, GCP Monitoring, SIEM concepts

• Knowledge of any of: PHP, JavaScript, Go (for reviewing and securing code)

• Experience with web servers & proxies: Apache, Nginx, Traefik, HAProxy

• Exposure to databases such as MySQL, MongoDB, Firebase, Elastic, Redis

• Event stack experience: Kafka, RabbitMQ, ActiveMQ, GCP Pub/Sub

• Network & request tracing including HTTP/1–3 and gRPC

• Experience running security workshops, threat modelling sessions or training

• Able to plan and manage your workload across multiple projects and priorities

• Comfortable collaborating, influencing and sharing knowledge with other teams

• Passionate about secure, scalable and complex distributed systems

• Confident communicating security concepts to both technical and non‑technical people

• Motivated to push security forward across the business, not just maintain it

• Great pay – and it’s always on time.

• No expectation of long hours. We respect your time.

• A personal development plan and regular 1:1s.

• Your choice of Mac, Linux or Windows Laptop

• Health Assured Employee Assistance Programme.

• A generous staff discount scheme.

• Flexible hours and no dress code.

• Mental health first aiders.

• A strong learning culture with support for external training.

• Cycle to work scheme.