Why this opportunity stands out
Lead a small, capable security engineering team and own the security posture of AWS estates for several clients, combining hands-on cloud security engineering with the technical leadership the role demands.
About the role
We are recruiting a Cyber Security Engineering Manager to lead a small, capable team of security engineers working with our clients in AWS environments. You will set the technical direction for the team, own the security posture of the cloud estates we look after, and stay hands-on enough to be credible in the conversations you have with engineering teams.
This role suits someone who has led security engineers before but still enjoys the detail: reviewing terraform, tightening IAM policies, automating detection and response, and working through a finding with a client's developers rather than simply reporting it to a manager.
Key responsibilities
Own the security posture of AWS estates across several client environments.
Set and embed cloud security standards, guardrails and policy-as-code across accounts.
Design, build and operate detection and response tooling in AWS.
Lead security assessments, penetration testing coordination and vulnerability remediation.
Embed security into delivery by working alongside client engineering and development teams.
Advise clients on cloud architecture, identity, encryption, logging and threat detection.
Maintain incident response playbooks and lead the response when incidents occur.
Report on risk and security posture to client and internal stakeholders in clear, non-jargon terms.
Support audit and compliance activity, including ISO 27001, SOC 2 and ISO 27017 expectations.
Stay current with the AWS security roadmap and the wider cloud threat landscape.
What they're looking for
Experience leading security engineers, or leading projects that require technical direction across a team.
Strong hands-on AWS knowledge, particularly IAM, KMS, CloudTrail, GuardDuty, Security Hub, VPC and network security.
Practical experience with infrastructure as code, ideally Terraform, and with securing it.
Experience building detection and response tooling and operating it in production.
Familiarity with container and workload security across Kubernetes and ECS.
Strong knowledge of threat modelling, vulnerability management and secure design principles.
Familiarity with compliance frameworks such as ISO 27001, SOC 2 and ISO 27017.
Excellent written and verbal communication, able to explain risk to technical and non-technical audiences.
A security mindset that is pragmatic and collaborative rather than obstructive.
Benefits
Hybrid working in London, with a flexible approach to office and remote time.
28 days of annual holiday, plus the usual public holidays.
Private medical cover and a company pension scheme with employer contributions.
A generous learning and development budget, with funded certifications and conference attendance.
The chance to shape a growing security engineering function from the ground up.
A collaborative engineering culture with real ownership of what you ship.