Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Build secure systems and automate defences for our core banking platform.
- Company: Join Engine by Starling, where security is a top priority.
- Benefits: Enjoy 33 days holiday, private medical insurance, and flexible working options.
- Why this job: Make a real impact in cloud security while working with cutting-edge technology.
- Qualifications: Experience in cloud security or strong programming skills in Go or Python.
- Other info: Collaborative team environment with opportunities for personal and professional growth.
The predicted salary is between 36000 - 60000 £ per year.
About Engineering at Engine by Starling. At Engine by Starling, we don't do "checkbox security". We treat security as a first-class engineering discipline. As a Cloud Security Engineer, you will be a hands-on builder responsible for the security architecture of our multi-tenant core banking platform. You'll spend your days writing code, automating defenses, and ensuring our infrastructure that spans across AWS and GCP is secure by design and compliant by default.
The Mission
This is a highly varied position where you will spearhead efforts to fortify both our infrastructure and application platforms. Your mission is to solve complex security problems through code, focusing on three core pillars:
- Identity & Network Security: Engineering robust IAM controls and zero-trust network architectures. You will lead the way in refining edge-defense strategies and trust redirection to ensure every request is verified and encrypted.
- Unified Vulnerability Orchestration: Building a custom "single pane of glass" for security data. You will engineer API integrations between scanning engines, dependency trackers, and internal portals to create a seamless, automated vulnerability ecosystem.
- Compliance as Code: Bridging the gap between technical execution and regulatory requirements. You will build the automated systems that provide real-time evidence for frameworks like SOC 2, ISO 27001 & PCI ensuring we stay compliant without manual overhead.
The Team
You will be a key member of our growing Security Engineering team, working at the intersection of our Infrastructure, Cross-Cutting, Information Security, and GRC teams. At Engine, we believe security should be at the heart of every technical process, not an afterthought. You won't work in a silo; you'll have close interaction with engineers across the business to deliver a platform that is resilient against evolving threats.
About You
We are primarily looking for experienced Cloud Security Engineers, but we are equally keen to talk to talented Software Engineers who possess strong programming skills and a genuine desire to apply their knowledge to security challenges. Engine engineers are motivated by impact and high-quality delivery, regardless of their original tech stack. Whether you are a security specialist or a developer with a "security-first" mindset, your place within the team will be shaped by your individual strengths and interests.
What you'll get to do?
You won't be manually checking boxes. You will be building the systems that check them for you.
- Security as Code: Design and maintain custom security tooling in Go to automate evidence collection for SOC2/ISO 27001 and remediation of security alerts.
- Infrastructure & IAM: Write and peer-review Terraform to manage identity and core infrastructure across AWS and GCP, ensuring the principle of least privilege is baked into the foundation and adhering to cloud security standards.
- Pipeline & Supply Chain: Contribute to maintaining the integrity of our software supply chain. You'll integrate SAST/DAST/SCA tools into our CI/CD pipelines (GitHub Actions/TeamCity) and manage container provenance.
- Cloud Native Defense: Engineer Kubernetes security solutions focusing on Cilium, RBAC, and network policies to protect our microservices.
- Identity & Trust (PKI): Build and maintain our Certificate Authority (CA) tooling and internal PKI infrastructure. You will be a trusted guardian of our cryptographic foundations, participating in Key Ceremonies to ensure the highest level of root-level security.
- Incident Response & Research: Support the Information Security team and participate in incident response and post-mortem activities.
Requirements
What skills are essential:
- The Builder Mindset: You have a background in software or infrastructure engineering. You find manual work a personal affront and prefer to solve problems through code.
- Polyglot-ish: You are proficient in Go (our preference) or Python.
- Cloud Native: You have deep, practical experience securing AWS or GCP and have managed them at scale using Terraform.
- Container Expert: You understand the nuances of Kubernetes security - from the runtime to the service mesh.
- Identity Mastery: Expert knowledge of cloud identity models.
- Networking: Strong understanding of network protocols.
What skills are desirable:
- Experience with Cilium networking or advanced K8s hardening (CKS/CKA).
- Deep knowledge of cryptography management and hardware security modules.
- Familiarity with container signing (Sigstore/Cosign) and image provenance.
- Cloud-native security certifications (AWS Security Specialist / GCP Professional).
- Experience working with CSA CCM.
Benefits
- 33 days holiday (including public holidays, which you can take when it works best for you).
- An extra day's holiday for your birthday.
- Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off.
- 16 hours paid volunteering time a year.
- Salary sacrifice, company enhanced pension scheme.
- Life insurance at 4x your salary & group income protection.
- Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton.
- Generous family-friendly policies.
- Incentives refer a friend scheme.
- Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks.
- Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing.
Cloud Security Engineer (Automation & Tooling) - Engine by Starling in Cardiff employer: Starling
Contact Detail:
Starling Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Cloud Security Engineer (Automation & Tooling) - Engine by Starling in Cardiff
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend meetups, and connect with people on LinkedIn. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repository showcasing your projects, especially those related to cloud security and automation. This gives potential employers a taste of what you can do and sets you apart from the crowd.
✨Tip Number 3
Prepare for interviews by brushing up on common technical questions and scenarios related to cloud security. Practice coding challenges and be ready to discuss how you've tackled security problems in the past.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in joining our team at Engine by Starling.
We think you need these skills to ace Cloud Security Engineer (Automation & Tooling) - Engine by Starling in Cardiff
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the Cloud Security Engineer role. Highlight your experience with AWS, GCP, and any relevant coding skills, especially in Go or Python. We want to see how your background aligns with our mission!
Show Off Your Projects: If you've worked on any cool security projects or built tools that automate processes, don’t hold back! Share these experiences in your application. We love seeing hands-on builders who can demonstrate their impact through code.
Be Clear and Concise: When writing your application, keep it straightforward. Use clear language and avoid jargon unless it's relevant. We appreciate a well-structured application that gets straight to the point—just like we do in our engineering!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands. Plus, it shows us you're keen on joining our team at Engine by Starling!
How to prepare for a job interview at Starling
✨Know Your Code
As a Cloud Security Engineer, you'll be expected to write code and automate processes. Brush up on your Go or Python skills before the interview. Be ready to discuss your previous projects and how you’ve used coding to solve security challenges.
✨Understand Cloud Security Fundamentals
Familiarise yourself with AWS and GCP security best practices. Be prepared to talk about IAM controls, zero-trust architectures, and how you would implement these in a multi-tenant environment. Showing that you can think critically about cloud security will impress the interviewers.
✨Demonstrate Your Problem-Solving Skills
Engine by Starling values a builder mindset. Prepare to discuss specific security problems you've solved through automation or tooling. Think of examples where you’ve improved security processes or reduced manual overhead using code.
✨Show Your Team Spirit
Collaboration is key at Engine by Starling. Be ready to share experiences where you worked closely with other teams, such as Infrastructure or Information Security. Highlight how you contributed to a project and how you value teamwork in achieving security goals.
