Security Engineer III – Security Operations

About the role

Join a globally distributed engineering team protecting critical cloud infrastructure in a modern payments environment. As a Security Engineer III you will own detection and response capabilities, build SIEM detections, automate workflows, and develop security tooling.

Key responsibilities

• Design, implement and tune security detections across Elastic SIEM and AWS environments.
• Investigate alerts, triage incidents, document findings and drive resolutions.
• Develop automation workflows and runbooks using Python and no‑code tools such as Zapier or Tines.
• Maintain audit‑ready controls for SOC 2, PCI DSS and other compliance frameworks.
• Use Terraform and Python to build and improve security infrastructure.
• Participate in on‑call rotation for security monitoring and incident response.

Required profile

• Hands‑on experience in security operations and cloud‑native threat detection.
• Proven ability to investigate and resolve security incidents independently.
• Strong written communication skills for clear documentation and risk reporting.
• Willingness to work autonomously and participate in on‑call duties.

Required skills

• Python scripting and automation.
• Terraform or other infrastructure‑as‑code tools.
• Experience with Elastic SIEM (or comparable platforms such as Splunk, Microsoft Sentinel).
• Securing AWS environments and building cloud‑native detections.
• Knowledge of the MITRE ATT&CK framework.
• Familiarity with SOAR platforms or no‑code automation tools (Zapier, Tines) – nice to have.

What we offer

• Fully remote work within a globally distributed team.
• Competitive equity share options.
• Flexible holiday policy (minimum 25 days).
• Access to coworking spaces in major cities.
• Home office setup contribution (£500) and high‑quality equipment.
• Private medical insurance and a generous learning budget.