You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. com's security posture across our multi-cloud environments and SIEM platform. This role sits at the intersection of cloud security engineering and detection capability — responsible for both hardening the infrastructure we operate on and ensuring we can see what's happening across it.You will lead security integration projects, guide cloud engineering teams, and drive continuous improvement across monitoring and detection, including applying AI to accelerate security operations.This is not a tool-monitoring role. You are here to architect secure cloud environments, build and enhance detection logic at scale, and drive measurable improvements to our security baseline across AWS, Azure, and GCP.You will partner closely with Engineering, GRC, Technology Risk and Security Operations - defining standards, fine tuning the SIEM, and progressively taking on the most complex cloud security and detection engineering challenges across the organisation.What you’ll be responsible forCloud SecuritySecure and continuously improve our multi-cloud estate (AWS, Azure, GCP) using cloud native tooling to keep our cloud infrastructure hardened and compliantPartner with Engineering and Security Operation team to make security a natural part of how we design and deliver, automating compliance checks so security scales without frictionDefining and enforcing cloud security architecture standards, guardrails, and policy-as-code inline with industry best practices including NIST, CIS, and PCI DSS.Security MonitoringFine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage.AI SecurityDesign and implement guardrails for AI/LLM systems, covering data exposure, prompt injection, and model misuse risks.Leverage AI and automation to enhance alert investigation, enrichment, and response workflows.Maintain technical policies and standards for the secure use of AI tools across the organisation.What we’re looking for6+ years of hands-on experience securing AWS, Azure, and GCP environments, including Azure Policy, IAM, Infrastructure-as-code (IAC) security or other cloud native tooling.Experience with security tools: Microsoft Sentinel, SentinelOne, NetSkope, Flashpoint, Wiz or similar tooling.Strong Microsoft Sentinel expertise: Working knowledge of DLP and threat intelligence monitoring.Experience applying AI/ML to security workflows - automated triage, behavioural analytics, or LLM-assisted investigation.Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF.Scripting proficiency in Python, PowerShell, or Bash for security automation.Nice to haveAZ-500, AWS Certified Security - Specialty, or equivalent cloud security certification.Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.
Senior AWS Cloud Security Engineer in London employer: Checkout.com
Checkout.com is an exceptional employer that champions a flexible hybrid working model, allowing employees to balance their professional and personal lives effectively. With a strong emphasis on growth and collaboration, the company provides ample opportunities for career development while working alongside talented teams in the dynamic financial services sector in London. Joining Checkout.com means being part of a forward-thinking organisation that values compliance and innovation in payments and product regulation.
