At a Glance
- Tasks: Shape security in a fast-growing, AI-driven digital healthcare platform.
- Company: Join HealthHero, Europe's largest digital clinic, transforming healthcare.
- Benefits: Enjoy 25 days leave, health schemes, and a supportive team environment.
- Other info: Hybrid work model with opportunities for professional growth and development.
- Why this job: Make a real impact on cloud security across Europe with innovative technology.
- Qualifications: Experience in cloud security, DevSecOps, and strong technical skills required.
Job Description
Senior Cloud Security Engineer (London, Bracknell or Bristol)
We are HealthHero, Europe’s largest digital clinic. Join us at a pivotal moment as we scale our digital healthcare platform across Europe — giving you the chance to shape security at the heart of a fast-growing, AI-driven business. We are recruiting an exciting Senior Cloud Security Engineer on an initial 12 month fixed term contract, with a view to becoming permanent – based in either our London or Bristol office two days per week.
About the role
This role will form a fundamental part of a growing Platform Security function, where the team covers application security, cloud security, security operations, culture and risk management. As a tech-centric organisation the Information Security team will play a critical part in embedding a security-first mindset into application development and continuous application monitoring. This role will co-own the cloud security posture and tooling across HealthHero’s AWS and Azure estates and have the opportunity to tackle cloud security with an international scope. The role will be supported by a multidisciplinary force of Infrastructure, Data Governance and Engineering team leads with a security focus as part of their remit. The role has a focus on infrastructure and cloud networking when it comes to security posture.
As an experienced Cloud Security Engineer, your working day will include but not be limited to:
DevSecOps & SDLC
- Champion integration of security testing into CI/CD pipelines across all development teams and usage of automated security gates: SAST, DAST, dependency scanning, secrets detection
- Enable self-serve security tooling for development teams
- Ability to set up development environment
Cloud Security
- Own cloud security posture management using Wiz (or similar CSPM) Define and enforce cloud security baselines, guardrails, and policies in AWS
- Implement and maintain IaC security scanning for Terraform
- Manage IAM policies, network segmentation, and secrets management
- Configure and tune SIEM (or similar) for cloud-focused detection
- Establish logging, monitoring, and alerting requirements based on threat modelling
- Investigate and respond to cloud security events
Risk & Compliance
- Identify, articulate, and escalate security risks to senior leadership with mitigation plans
- Track and remediate vulnerabilities across infrastructure
- Manage customer initiatives related to due diligence when required to
- Support and develop annual programme of Penetration Testing and associated remediations
Stakeholder Engagement
- Partner with internal and stakeholder management to support any requirements from the security function - particularly governance and accreditation requirements across different countries
- Provide expertise on emerging threats and vulnerabilities
- Support response to customer/client due diligence requests with timely and accurate information regarding vulnerability exposure
Key Skills and Experience
Essential
- Proven experience in application security, DevSecOps, or cloud security
- Strong understanding of cloud networking
- Experience securing cloud environments (AWS, Azure)
- Ability to read and write IAC (Terraform) code, comfortable with IAC lifecycles
- Familiarity with container security and Kubernetes
- Understanding of secure coding, penetration testing techniques, SIEM, and vulnerability management
- Strong technical skills relevant to Information Security such as secure coding standards, ethical hacking techniques, network security and risk analysis
- Understanding of managing Secure Development Lifecycle and Vulnerability Management.
- Understanding and practical experience of ISO27001:2022 controls and audit processes
Desirable
- AWS Security Specialty or similar certification
- Experience in regulated environments (healthcare, financial services)
- Familiarity with NHS DSPT
- Technical knowledge of GDPR and data protection requirements
- Hands-on with CI/CD security tooling and pipeline integration
- Interest in learning other countries health and security regulations (France / UK / IR / DE)
About us
We exist to simplify healthcare and improve lives by making care feel instant, intelligent and human.
HealthHero is Europe’s largest digital health provider, delivering 4 million consultations per year. But we’re just getting started. We’ve built a seamless digital clinic that brings body and mind together — from GP appointments and mental health support to long-term condition management. By sitting behind the world’s leading insurers and employers and supporting public health systems, we make it easier for millions of people to get the care they need, exactly when they need it.
We are a high-growth, capital-backed business with a sophisticated scale strategy. Our team is a unique blend of those with strong digital experience, management consultants, creatives and industry-leading clinical experts.
We aren’t just digitising appointments; we’re building the next of healthcare. We’re creating an AI-powered, always-on ecosystem that learns from every interaction to shift the needle from reactive treatment to proactive, sustainable health. At HealthHero, we are digital when it should be and human where it counts.
Join us, and help build a next health system the world is waiting for.
What we offer
- A full induction training programme, which will be undertaken via Microsoft Teams.
- An opportunity to work as part of an experienced team who are passionate in their field, supportive, diverse and dynamic.
- 25 days leave.
- Bank Holidays and your birthday off as leave.
- Regular 1-2-1s with your line Manager.
- 24/7 on-call staff support.
- Auto-enrolment pension scheme.
- Health Scheme and access to our Employee Assistance Programme.
- Life Insurance Scheme.
Hybrid:
London, Bracknell or Bristol (There is a requirement to work in the office for a minimum of two days per week)
Additional information
Please note that we are unfortunately unable to offer a sponsor licence to candidates who require sponsorship from their employer.
Senior Cloud Security Engineer in London employer: Energy Jobline ZR
World Wide Technology (WWT) is an exceptional employer that fosters a culture of innovation and collaboration, making it an ideal place for a Programme Director in London. With a strong focus on employee growth, WWT offers opportunities to lead cutting-edge automation projects while working in a hybrid environment that promotes work-life balance. The company values transparent communication and client-first service, ensuring that employees are empowered to drive meaningful outcomes and develop their skills in a supportive atmosphere.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Cloud Security Engineer in London
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Energy Jobline ZR.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Energy Jobline ZR.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Energy Jobline ZR.
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Energy Jobline ZR a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Energy Jobline ZR; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Energy Jobline ZR.
How to prepare for a job interview at Energy Jobline ZR
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Energy Jobline ZR for the Senior Cloud Security Engineer in London, be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Energy Jobline ZR.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Senior Cloud Security Engineer in London role at Energy Jobline ZR.
