Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Build secure systems and automate defences for our core banking platform.
- Company: Join Engine by Starling, where security is a top priority.
- Benefits: Enjoy 33 days holiday, private medical insurance, and flexible working options.
- Why this job: Make a real impact in cloud security while working with cutting-edge technology.
- Qualifications: Experience in cloud security or strong programming skills in Go or Python.
- Other info: Collaborative team environment with opportunities for personal and professional growth.
The predicted salary is between 48000 - 72000 £ per year.
At Engine by Starling, we don’t do "checkbox security". We treat security as a first-class engineering discipline. As a Cloud Security Engineer, you will be a hands-on builder responsible for the security architecture of our multi-tenant core banking platform. You’ll spend your days writing code, automating defenses, and ensuring our infrastructure that spans across AWS and GCP is secure by design and compliant by default.
The Mission
This is a highly varied position where you will spearhead efforts to fortify both our infrastructure and application platforms. Your mission is to solve complex security problems through code, focusing on three core pillars:
- Identity & Network Security: Engineering robust IAM controls and zero-trust network architectures. You will lead the way in refining edge-defense strategies and trust redirection to ensure every request is verified and encrypted.
- Unified Vulnerability Orchestration: Building a custom "single pane of glass" for security data. You will engineer API integrations between scanning engines, dependency trackers, and internal portals to create a seamless, automated vulnerability ecosystem.
- Compliance as Code: Bridging the gap between technical execution and regulatory requirements. You will build the automated systems that provide real-time evidence for frameworks like SOC 2, ISO 27001 & PCI ensuring we stay compliant without manual overhead.
The Team
You will be a key member of our growing Security Engineering team, working at the intersection of our Infrastructure, Cross-Cutting, Information Security, and GRC teams. At Engine, we believe security should be at the heart of every technical process, not an afterthought. You won’t work in a silo; you’ll have close interaction with engineers across the business to deliver a platform that is resilient against evolving threats.
About You
We are primarily looking for experienced Cloud Security Engineers, but we are equally keen to talk to talented Software Engineers who possess strong programming skills and a genuine desire to apply their knowledge to security challenges. Engine engineers are motivated by impact and high-quality delivery, regardless of their original tech stack. Whether you are a security specialist or a developer with a "security-first" mindset, your place within the team will be shaped by your individual strengths and interests.
What you’ll get to do?
You won’t be manually checking boxes. You will be building the systems that check them for you.
- Security as Code: Design and maintain custom security tooling in Go to automate evidence collection for SOC2/ISO 27001 and remediation of security alerts.
- Infrastructure & IAM: Write and peer-review Terraform to manage identity and core infrastructure across AWS and GCP, ensuring the principle of least privilege is baked into the foundation and adhering to cloud security standards.
- Pipeline & Supply Chain: Contribute to maintaining the integrity of our software supply chain. You’ll integrate SAST/DAST/SCA tools into our CI/CD pipelines (GitHub Actions/TeamCity) and manage container provenance.
- Cloud Native Defense: Engineer Kubernetes security solutions focusing on Cilium, RBAC, and network policies to protect our microservices.
- Identity & Trust (PKI): Build and maintain our Certificate Authority (CA) tooling and internal PKI infrastructure. You will be a trusted guardian of our cryptographic foundations, participating in Key Ceremonies to ensure the highest level of root-level security.
- Incident Response & Research: Support the Information Security team and participate in incident response and post-mortem activities.
Requirements
What skills are essential:
- The Builder Mindset: You have a background in software or infrastructure engineering. You find manual work a personal affront and prefer to solve problems through code.
- Polyglot-ish: You are proficient in Go (our preference) or Python.
- Cloud Native: You have deep, practical experience securing AWS or GCP and have managed them at scale using Terraform.
- Container Expert: You understand the nuances of Kubernetes security - from the runtime to the service mesh.
- Identity Mastery: Expert knowledge of cloud identity models.
- Networking: Strong understanding of network protocols.
What skills are desirable:
- Experience with Cilium networking or advanced K8s hardening (CKS/CKA).
- Deep knowledge of cryptography management and hardware security modules.
- Familiarity with container signing (Sigstore/Cosign) and image provenance.
- Cloud-native security certifications (AWS Security Specialist / GCP Professional).
- Experience working with CSA CCM.
Benefits
- 33 days holiday (including public holidays, which you can take when it works best for you).
- An extra day’s holiday for your birthday.
- Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off.
- 16 hours paid volunteering time a year.
- Salary sacrifice, company enhanced pension scheme.
- Life insurance at 4x your salary & group income protection.
- Private Medical Insurance with VitalityHealth including mental health support and cancer care.
- Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton.
- Generous family-friendly policies.
- Incentives refer a friend scheme.
- Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks.
- Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing.
Senior Cloud Security Engineer (Automation & Tooling) - Engine by Starling employer: Starling
Contact Detail:
Starling Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Cloud Security Engineer (Automation & Tooling) - Engine by Starling
✨Tip Number 1
Network like a pro! Reach out to current employees at Engine by Starling on LinkedIn. A friendly chat can give you insider info and maybe even a referral, which can really boost your chances.
✨Tip Number 2
Show off your skills in real-time! If you get the chance, ask for a technical interview or coding challenge. This is your moment to shine and demonstrate how you tackle security problems through code.
✨Tip Number 3
Prepare for those tricky questions! Brush up on your knowledge of AWS, GCP, and Terraform. Be ready to discuss how you've tackled security challenges in the past and how you can apply that experience at Engine.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in joining the team.
We think you need these skills to ace Senior Cloud Security Engineer (Automation & Tooling) - Engine by Starling
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter for the Senior Cloud Security Engineer role. Highlight your experience with AWS, GCP, and any relevant coding skills in Go or Python. We want to see how your background aligns with our mission at Engine by Starling!
Show Off Your Projects: If you've worked on any cool security projects or built tools that automate processes, don’t hold back! Share these experiences in your application. We love seeing hands-on builders who can demonstrate their impact through code.
Be Clear and Concise: When writing your application, keep it straightforward. Use clear language and avoid jargon where possible. We appreciate a well-structured application that gets straight to the point, showing us why you’re the right fit for our team.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands. Plus, it shows us you’re genuinely interested in joining our team at Engine by Starling!
How to prepare for a job interview at Starling
✨Know Your Tech Stack
Make sure you’re well-versed in the technologies mentioned in the job description, especially Go and Terraform. Brush up on your knowledge of AWS and GCP security practices, as well as Kubernetes security. Being able to discuss specific projects or experiences where you've applied these skills will really impress the interviewers.
✨Demonstrate Your Builder Mindset
Showcase your problem-solving abilities by discussing how you've automated processes or built tools in the past. Prepare examples that highlight your experience in writing code to solve security challenges, as this aligns perfectly with the role's focus on automation and tooling.
✨Understand Compliance as Code
Familiarise yourself with frameworks like SOC 2 and ISO 27001. Be ready to explain how you would approach building automated systems for compliance. This shows that you not only understand security but also how it integrates with regulatory requirements, which is crucial for the position.
✨Engage with the Team's Mission
Research Engine by Starling’s approach to security and be prepared to discuss how you can contribute to their mission of treating security as a first-class engineering discipline. Showing enthusiasm for their values and how you can fit into their team dynamic will set you apart from other candidates.
