Why this opportunity stands out
Lead the cyber security engineering function for a London-based organisation with an AWS-native and AI-augmented security stack. £130,000 to £150,000 base.
About the role
167 Solutions, a specialist technology recruitment business, is recruiting a Head of Cyber Security Engineering on behalf of a London-based organisation investing in its cloud-first security capability.
This is a permanent role with hybrid working in London. The successful candidate will own the cyber security engineering roadmap, lead a multidisciplinary team of security engineers, and partner closely with platform, data and product leadership to embed security-by-design across the enterprise. The security stack is anchored in AWS-native services and increasingly augmented with AI-driven detection, response and analytics tooling.
The role requires a leader who is equally comfortable designing a multi-year security strategy and rolling up their sleeves to ship production-grade controls, integrations and automations. The Head of Cyber Security Engineering will be the senior technical authority for security across the organisation and a key voice in incident response, regulatory readiness and third-party risk.
The base salary range for this role is £130,000 to £150,000, depending on experience.
Applicants must be eligible to work in the United Kingdom without visa sponsorship for this engagement. The engagement is contracted between the client and the contractor; 167 Solutions is not the employer of record.
167 Solutions is an equal opportunity recruiter. We welcome applications from all qualified candidates regardless of race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status or any other characteristic protected by applicable law. Candidates who require reasonable accommodation to participate in the recruitment process may contact harshil@167solutions.com.
Engagement may be subject to background checks and standard onboarding requirements set by the client.
Key responsibilities
• Lead, coach and grow a team of security engineers across detection, response and platform.
• Architect and operate AWS-native security controls: IAM, GuardDuty, Security Hub, Macie, KMS, WAF, Shield and VPC networking controls.
• Design and deliver the AI-augmented security stack: LLM-assisted triage, anomaly detection, threat-intelligence enrichment and automated response playbooks.
• Define and enforce security-by-design standards across product, platform and data teams.
• Own incident response engineering: tooling, runbooks, post-incident reviews and continuous improvement.
• Drive regulatory and audit readiness, including ISO 27001, SOC 2, GDPR and Cyber Essentials Plus.
• Partner with the CISO and senior leadership on risk posture, threat modelling and third-party assurance.
• Lead the design and operation of security telemetry pipelines and SIEM/SOAR platforms.
• Manage vendor relationships, tooling renewals and budget for the security engineering function.
What they're looking for
• Deep hands-on expertise with AWS security services and cloud-native security architecture.
• Strong engineering background: Infrastructure as Code, Python, detection-as-code and CI/CD for security.
• Practical experience with AI-augmented security tooling, including LLM-based detection, response and analytics.
• Track record building and leading high-performing security engineering teams.
• Strong knowledge of modern threat landscapes, MITRE ATT&CK and cloud-specific attack patterns.
• Experience with SIEM, SOAR, EDR, identity protection and cloud workload protection platforms.
• Familiarity with ISO 27001, SOC 2, GDPR, NIS2 and Cyber Essentials Plus controls.
• Excellent stakeholder communication, including the ability to present at board and audit-committee level.
• Relevant certifications such as AWS Security Specialty, CISSP, CISM or OSCP are advantageous.
• Eligibility to work permanently in the United Kingdom without visa sponsorship.
Benefits
• Hybrid working in London.
• Engagement within a cloud-first, security-mature organisation.
• Direct influence over an AWS-native and AI-augmented security stack.
• Leadership of a multidisciplinary cyber security engineering function.
• Long-term investment in professional development and certifications.