Senior/Lead Cloud Security Engineer

We are looking for a Cloud Security Engineer to join Velocity, our Internal Platform team. Your mission is to ensure that every system, pipeline, and tool our engineers rely on is secure by default - so they can ship fast without ever compromising trust. The Velocity team exists to eliminate friction. We build and own the foundation everything else runs on: cloud infrastructure, developer tooling, and SRE practices.

You will:

• Embed Security Into the Platform: Bake security, compliance, and best practices into the core stack so they’re invisible to developers and impossible to skip.
• Automate Everything: Drive security-as-code across infrastructure, CI/CD pipelines, and container lifecycles - making manual gates a thing of the past.
• Cloud Security Posture: Own and continuously strengthen Flo’s AWS security posture using tools like GuardDuty, Inspector, Security Hub, and SSM Patch Manager.
• Container & Supply Chain Security: Harden container image security end-to-end - patch vulnerabilities automatically with Copacetic, sign and verify images with Cosign/Sigstore, and enforce policies at admission with Kyverno.
• Policy as Code: Manage CI/CD security across the organisation using policy-as-code tooling (Kyverno, Checkov), ensuring standards are enforced programmatically.
• Security Observability: Build visibility into security performance by measuring and visualising actionable metrics using tools like Databricks Dashboards or Looker.
• High-Scale Privacy: Support the infrastructure for industry-leading privacy features, such as our TIME-recognised Anonymous Mode.
• Culture & Thought Leadership: Shape Flo’s broader security culture through proactive engagement, documentation, and cross-team collaboration.

Benefits:

• Participation in Flo’s success: All employees are eligible to participate in Flo’s Employee Share Ownership Plan (ESOP) and be awarded equity to participate in the long-term value creation of the business.
• Family benefits: 1 month fully paid paternity leave and 6 months of fully paid maternity leave, with a $5000 bonus on your return to work.
• Resources you need to thrive: Access to internal and external learning resources and tools to challenge your knowledge and push yourself further every day.
• Holiday and sick leave: 25 days paid holiday in addition to local public holidays and 30 days fully paid sick leave per year.
• Flexible workplace: Encouragement to spend 2 days/week in the office and the option to work from anywhere for up to 2 months a year.

Requirements:

• Automation Mindset: Comfortable scripting in Python, Bash, or similar to automate security workflows.
• Cloud Native Mastery: Deep expertise in AWS security services and best practices is essential.
• Container Security: Strong knowledge of Kubernetes security, image hardening, and admission control.
• Infrastructure as Code: Proficient in Terraform and Terragrunt - you run everything as code.
• Experience: 7+ years in Infrastructure Security, Cloud Security, or Security Engineering roles.
• SSDLC: Experience building Secure Software Development Lifecycle phases into engineering workflows.
• Network Security: Understanding of modern network security principles and their practical application.
• Identity & Access: Solid understanding of identity management principles - SSO, OAuth, JWT, SAML.
• Experience with security monitoring and event correlation systems (IDS/IPS, SIEM, AWS-native tooling).
• Knowledge of Zero Trust Architecture and its implementations (e.g., Cloudflare).
• Familiarity with secret management processes and tools.
• Experience in multi-cloud environments (AWS and preferably GCP).
• Understanding of business continuity principles (BIA, DRP).
• Professional accreditations such as AWS Security Specialty, CKS, or CISSP.