Senior Security Engineer

Join Thredd as a Senior Security Engineer, where you will be a security ambassador across the business, influencing engineering decisions and embedding security into everyday decision-making. You will design secure cloud architectures, build security telemetry, and mentor within the security architecture function. This role offers a range of benefits, including 25 days of annual leave, private medical insurance, and a pension scheme.

• Promouvoir et intégrer la sécurité dans toutes les initiatives, en veillant à la confiance des clients et à la conformité réglementaire.
• Concevoir et mettre en œuvre des architectures cloud et de plateforme sécurisées par défaut, en automatisant les contrôles de sécurité et de conformité.
• Construire et maintenir des relations stratégiques avec la direction, les équipes juridiques et les organismes de réglementation externes pour garantir l'alignement des stratégies de sécurité.
• Are you an experienced Security Engineer who enjoys sharing knowledge as much as solving complex technical challenges?
• Would you like to use your expertise to mentor the next generation of security talent, partner with engineering teams, and help make security a natural part of how we design, build, and deliver technology?
• Proficiency in Infrastructure-as-Code (IaC) and CI/CD tooling, with experience embedding security guardrails and policy enforcement
• Demonstrate experience designing, building, and operating automated security and compliance controls
• Solid understanding of application security (AppSec) principles, including secure SDLC practices, vulnerability management, and remediation
• Strong hands-on experience with AWS security controls, including network security, vulnerability management, cloud security posture management (CSPM), runtime protection, logging and monitoring, and event-driven response and remediation
• Experience integrating and operating core security tooling such as vulnerability scanners, log collection platforms, endpoint protection, and detection capabilities
• Ability to design and maintain security telemetry pipelines, dashboards, and reporting mechanisms to support continuous assurance