Senior Platform Security Engineer

At Multiverse, the upskilling platform for AI and Tech adoption, you will help transform the workforce. We partner with 1,500+ companies, have raised £220 million in Series D, are the UK’s first EdTech unicorn, and employ 800+ people.

Join our Tech Foundations team as a security‑mindful engineer. Rather than auditing from the outside, you’ll embed security into the Platform team and become the platform’s security champion. The Foundation teams build the “paved road” for all engineers, creating tools and infrastructure that empower product teams to ship secure software fast with minimal friction. You will embed security directly into the platform, turning “shifting left” into practice. You will work closely with our central InfoSec team for strategic guidance while leading the implementation of security solutions as part of the Platform team. Help spot potential vulnerabilities before they reach production, coach engineers on secure coding practices, and own security from the ground up.

Responsibilities

• Architect secure foundations: design, build and maintain security controls and services within CI/CD pipelines.
• Secure infrastructure as code: act as subject‑matter expert for securing Terraform modules and cloud environments (AWS, Azure).
• Incident response: participate in on‑call rotation, troubleshoot critical issues, lead security‑specific incident response, drive blameless post‑mortems.
• Integrate security testing: embed SAST, DAST, SCA and container scanning into developer workflows, making testing a self‑service, low‑friction part of the lifecycle.
• Enable vulnerability remediation: develop tools and processes to triage, prioritise and remediate vulnerabilities, automating discovery and providing actionable context.
• Implement platform‑level detection: build automated threat detection and response capabilities using cloud security and observability platforms.
• Act as a security partner: provide expert guidance on secure coding (Elixir, TypeScript/Node, Python), secret management, event‑driven architecture and AI services.
• Govern emerging technologies: help architect and implement our AI Management System, ensuring AI services meet ISO 42001 governance standards.

Qualifications

• Builder mindset: strong coding and scripting skills (Python, TypeScript/Node) and passion for automation.
• Cloud & infrastructure experience: building and securing modern cloud‑native infrastructure, CI/CD pipelines (GitHub Actions), cloud environments (AWS/Azure) and IaC (Terraform).
• Application security knowledge: solid grasp of the AppSec landscape and integrating SAST, DAST, SCA into workflows.
• Excellent communication skills: collaborate with engineering teams and translate complex security concepts into clear guidance.
• Observability‑driven: experience using security and monitoring platforms (e.g., Datadog) to detect and respond to threats.

Bonus Points

• PAM solutions such as Delinea Secret Server or HashiCorp Vault.
• Securing event‑messaging platforms (CloudAMQP, RabbitMQ).
• Familiarity with Elixir.
• Experience securing AI/ML pipelines or services.
• Knowledge of governance standards like ISO 42001.
• Relevant industry certifications (AWS Certified Security – Specialty, AZ‑500).

Benefits

• 27 days holiday + 5 additional days (1 life event, 2 volunteer, 2 wellbeing days) + 8 bank holidays.
• Health & wellness: private medical insurance with Bupa, medical cashback scheme, life insurance, gym membership & wellness resources via Wellhub, access to Spill mental health support.
• Hybrid work: office 3 days per week.
• Work‑from‑anywhere: up to 10 days per year.
• Team fun: weekly socials, company‑wide events and office snacks.

Diversity & Inclusion

We’re an equal‑opportunity employer. Every applicant and employee is afforded the same opportunities regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. This will never change.

Safeguarding

All posts at Multiverse involve safeguarding responsibilities. Successful applicants must complete a Disclosure Form from the Disclosure and Barring Service (DBS). Failure to declare any convictions may disqualify a candidate or result in dismissal.

Location: London, England, United Kingdom.