Senior Security Engineer (AWS)

Who we are 🌍

We’re IAG Loyalty – one organisation with two ambitious, growing divisions across Loyalty and Holidays. Each has its own goals, strategy and team, but together we’re united by a shared vision to create a more rewarding world of travel and experiences.

Our Loyalty division is home to Avios, the global loyalty currency, enabling millions of members to collect and spend rewards across travel, retail and financial services.

Our Holidays division including British Airways Holidays and Iberia Vacaciones, brings together trusted brands, connecting customers to thousands of destinations worldwide through seamless, end-to-end travel experiences.

We’re on an exciting journey of growth and transformation – we’re going places.

The opportunity ✨

The Loyalty division is fast becoming a Platform as a Service business. As a result, we are looking for a highly capable individual to join our security team. The candidate will have a strong technical background and experience in implementing best practice security controls within cloud and DevOps. They will be comfortable working in a cloud‑native environment where high rates of technology change are the norm. We are looking for someone who can lead the delivery of a number of our security engineering objectives, be responsible for the effective operation of the tools that help keep our organisation secure and manage a small team of security engineers.

What you’ll be doing 🚀

You will lead the Platform Security practice within our security team, driving key initiatives to enhance the security of our cloud platform and software development lifecycle. This involves coordinating and contributing to continuous security improvements, developing secure‑by‑default patterns for engineering teams, and maintaining critical security tools such as CSPM and CNAPP.

In addition, you’ll write scripts and build automation tools to streamline security activities, work cross‑functionally to ensure effective monitoring and incident response, and collaborate closely with product teams to provide guidance and encourage adoption of security best practices. You’ll also take part in an on‑call rotation to support timely and effective incident response when needed.

What we need from you ⚡

• Cloud engineering experience with security tooling and cloud workload protection
• Skilled in DevOps, AWS, Infrastructure as Code (Terraform), and scripting (Python, Bash)
• Knowledge of secure engineering standards (OWASP, CIS, NIST) and Agile/DevOps practices
• Experienced with CSPM, CNAPP, security incident response, and SIEM tools
• Ability to evaluate and recommend new security technologies
• Clear communicator focused on enhancing developer experience
• Calm, evidence‑based decision‑making under pressure
• Entrepreneurial, goal‑oriented, and innovative
• Comfortable sharing best practices across the organisation

We might not be right for you if:

• You only want to focus on your to‑do list; we’re a small, high‑performing team, we help each other to succeed.
• You value perfection over fast iteration and progress; IAG Loyalty moves fast, we learn and iterate as we go; our environment isn’t right for everyone.
• You’re looking to create but not build; this is an end‑to‑end role, you need to be comfortable owning your space, from ideation through to delivery and review.

If you think you have what it takes but don\’t meet every single point above, please do still apply. We\’d love to chat and see if you could be a great fit.

The Blend 📍

This role will work as part of our Loyalty Division and is based out of our London office. We call our approach to hybrid working The Blend — it’s about giving you the flexibility to choose where you do your best work, while staying connected with your team and the wider business. This means you will be required to spend at least two days per week in the office, with the rest of the time

Diversity and Inclusion

Our vision is to create a more rewarding world of travel and experiences. Delivering that requires diverse thinking and inclusive leadership.

We are committed to building a workplace where people feel they belong and are valued for their perspective. Inclusion drives better decisions, stronger performance and more innovative outcomes.

We actively encourage applications from people with different experiences and backgrounds, and are committed to ensuring our recruitment process is fair, inclusive and accessible.