Senior Cloud Security Engineer

About the role

HealthHero, Europe’s largest digital clinic, is looking for a Senior Cloud Security Engineer to join its Platform Security function. The role is based in London (or Bristol) on a hybrid schedule, starting with a 12‑month fixed‑term contract and the possibility of becoming permanent. You will help shape the security posture of a fast‑growing, AI‑driven health‑tech business across its AWS and Azure environments.

Key responsibilities

• Co‑own the cloud security posture and tooling for AWS and Azure estates.
• Integrate security testing (SAST, DAST, dependency scanning, secrets detection) into CI/CD pipelines.
• Enable self‑serve security tooling for development teams.
• Manage cloud security posture using a CSPM solution such as Wiz.
• Define and enforce security baselines, guardrails, and policies.
• Implement IaC security scanning for Terraform and manage IAM, network segmentation, and secrets.
• Configure and tune SIEM for cloud‑focused detection, and set up logging, monitoring, and alerting.
• Investigate and respond to cloud security events.
• Identify, articulate, and escalate security risks with mitigation plans.
• Track and remediate infrastructure vulnerabilities and support penetration‑testing programmes.
• Collaborate with infrastructure, data governance, and engineering leads.

Required profile

• Proven experience securing AWS and Azure cloud environments.
• Strong background in DevSecOps and CI/CD integration.
• Hands‑on experience with Infrastructure as Code, especially Terraform.
• Familiarity with CSPM tools and cloud security posture management.
• Ability to work across multidisciplinary teams and communicate risks to senior leadership.

Required skills

• AWS
• Azure
• Terraform
• Wiz (or similar CSPM)
• CI/CD pipelines
• SAST
• DAST
• Dependency scanning
• Secrets detection
• IAM management
• Network segmentation
• SIEM
• Logging, monitoring and alerting