At a Glance
- Tasks: Secure and evolve our cloud estate while tackling complex security challenges.
- Company: Join Blue Light Card, a diverse and innovative tech company.
- Benefits: Enjoy hybrid working, 25 days leave, and exclusive discounts.
- Other info: Collaborative environment with great social events and personal growth opportunities.
- Why this job: Make a real impact on cloud security and work with cutting-edge technology.
- Qualifications: Experience in cloud security, AWS, and compliance frameworks required.
The predicted salary is between 60000 - 80000 € per year.
We have an exciting opportunity for a Cloud Security Engineer to join our Technology team and play a key role in how we secure and evolve our cloud estate. You’ll be reporting directly to the Director of Technology & Security. This is a hands‑on role where you’ll take the technical lead on securing our cloud and edge estate. You’ll work closely with our platform and engineering squads, helping us continuously improve how we protect the infrastructure that sits behind our product. If you love solving complex security challenges and want your work to matter, this is a great time to join.
What You’ll Do
- Review and triage security findings, prioritise remediation, and work with engineering squads and third parties to continuously improve our cloud security position.
- Own our Cloud Security Posture Management tooling day to day, tuning policies, driving remediation, and keeping our security position visible across the business.
- Keep our AWS estate secure across IAM, network controls, encryption, logging, and workload protection, partnering with platform engineering on guardrails, Service Control Policies, and secure landing zones.
- Manage our Cloudflare edge as a security control, tuning WAF rules, overseeing rate limiting and bot management, and responding quickly as threats evolve.
- Lead detection and response for cloud and edge incidents, develop detections in our SIEM, and produce post‑incident reviews that help us learn and improve.
- Develop and maintain our technical security standards across cloud, WAF, IAM, and logging, keeping us aligned with best practice and our regulatory obligations.
- Support compliance across UK GDPR, PCI DSS, ISO 27001, NIST CSF, and Cyber Essentials Plus, contributing to risk assessments and implementing technical mitigations.
- Champion security best practice across our engineering teams, helping squads build security in from the start.
What You’ll Bring
- Extensive experience as a Cloud Security Engineer, with the ability to operate independently and influence how security is done across a technology organisation.
- Hands‑on experience with AWS, Cloudflare, Tenable, and SIEM, with the depth to use these tools confidently day to day.
- Proven experience working to frameworks including NIST CSF, ISO 27001, and Cyber Essentials Plus, with a practical understanding of what good compliance really looks like.
- Familiarity with Cloud Security Maturity Frameworks and benchmarks such as CIS, and the ability to apply them to raise security standards in practice.
- Experience leading or contributing to incident response, particularly for cloud and edge incidents such as credential stuffing, IAM compromise, and exposed assets.
- Strong working knowledge of Cloudflare Enterprise, including WAF rule authoring, Bot Management, and log pipelines into SIEM.
- A clear communication style and the ability to translate technical risk into plain language for non‑technical stakeholders.
- A collaborative approach, a strong track record of delivering results, and a genuine interest in how AI and automation can improve security operations.
We promote hybrid working and value in‑person collaboration, encouraging time in our offices, where you can make the most of our fully stocked snack drawers – either the HQ in Leicestershire, or London, Holborn office. The frequency and office location will vary depending on the role and team. We aim to be flexible, but we aren’t able to offer fully remote working.
What We Offer
- Hybrid working and flexible hours.
- EV charging and free parking onsite at HQ.
- 25 days annual leave plus an additional day off for your birthday, and a buy‑and‑sell holiday scheme of up to 5 days.
- A company bonus scheme.
- Your own Blue Light Card and exclusive access to thousands of discounts.
- Generous funded BUPA medical insurance covering pre‑existing conditions.
- Auto‑enrolment pension scheme via salary sacrifice, with employer NI savings reinvested into pensions.
- Enhanced parental leave and absence leave.
- Healthcare cashback plan.
- Employee assistance programme (including mental health support) and mental health first aiders.
- Great social events e.g., festive party, summer party, team socials, sports matches.
- Regular company‑wide recognition events e.g. monthly Light’s Up and annual Shine awards.
- Relaxed dress code and modern office space (games area, chill‑out areas, bookclub, free drinks/snacks).
- Onsite gym at HQ (including access to free HIIT & stretch classes).
- Strong learning and development culture and personal growth fund.
Cloud Security Engineer in London employer: Blue Light Card Ltd
At Blue Light Card, we pride ourselves on being an exceptional employer that values collaboration and innovation. As a Cloud Security Engineer, you'll enjoy a hybrid working model, flexible hours, and a supportive work culture that prioritises employee well-being and professional growth. With generous benefits including funded medical insurance, a personal growth fund, and vibrant social events, you'll find a rewarding environment where your contributions truly matter.
StudySmarter Expert Advice🤫
We think this is how you could land Cloud Security Engineer in London
✨Tip Number 1
Network like a pro! Reach out to current employees at Blue Light Card on LinkedIn or other platforms. Ask them about their experiences and any tips they might have for landing the Cloud Security Engineer role. Personal connections can make a huge difference!
✨Tip Number 2
Prepare for the interview by brushing up on your technical skills. Make sure you can confidently discuss AWS, Cloudflare, and incident response scenarios. We want to see how you tackle real-world security challenges, so be ready to share your thought process!
✨Tip Number 3
Show off your passion for security! During interviews, talk about any personal projects or contributions to open-source security tools. This demonstrates your commitment to the field and helps us see how you can bring value to our team.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in joining our awesome team at Blue Light Card!
We think you need these skills to ace Cloud Security Engineer in London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Cloud Security Engineer role. Highlight your hands-on experience with AWS, Cloudflare, and SIEM tools, and don’t forget to mention any frameworks you’ve worked with like NIST CSF or ISO 27001.
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you’re passionate about cloud security and how your skills can help us tackle complex challenges. Keep it concise but impactful!
Showcase Your Problem-Solving Skills:In your application, share specific examples of how you've solved security issues in the past. We love candidates who can demonstrate their ability to think critically and act decisively in high-pressure situations.
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to see your application and ensures you’re considered for the role. Plus, it’s super easy!
How to prepare for a job interview at Blue Light Card Ltd
✨Know Your Cloud Security Tools
Make sure you’re well-versed in the tools mentioned in the job description, like AWS, Cloudflare, and SIEM. Be ready to discuss your hands-on experience with these platforms and how you've used them to tackle security challenges.
✨Understand Compliance Frameworks
Familiarise yourself with compliance frameworks such as NIST CSF, ISO 27001, and Cyber Essentials Plus. Prepare to explain how you've applied these standards in previous roles and how they relate to the responsibilities of the position.
✨Showcase Incident Response Experience
Be prepared to share specific examples of incidents you've managed, particularly in cloud environments. Highlight your role in detection, response, and post-incident reviews to demonstrate your ability to lead in high-pressure situations.
✨Communicate Clearly and Collaboratively
Practice explaining complex technical concepts in simple terms. This will help you connect with non-technical stakeholders during the interview. Emphasise your collaborative approach and how you’ve worked with engineering teams to integrate security best practices.
