seon - Senior Security Engineer
Requirements
• 5+ years in security engineering with hands-on AWS experience: IAM, CloudTrail, GuardDuty, Security Hub, WAF, and the ability to investigate an incident from the logs up. • Working fluency in Terraform, Kubernetes and GitHub Actions. You can read a module or a workflow and tell whether it does what the policy says. • Python or a similar language for automating evidence collection, access reviews and alert enrichment, and comfort working with APIs and CI pipelines. • Experience leading ISO 27001 or SOC 2 as the primary contact for the auditor. • Experience with customer security questionnaires and vendor security reviews. • Clear, concise written English for auditors, engineers and customers. • You make decisions, prioritise against a roadmap, and ask for help early. • AMAZING IF YOU ALSO HAVE: • ● ISO 42001 or AI governance experience; PCI DSS as a service provider; DORA or financial-sector regulatory exposure; detection engineering or incident response background; Kyverno, Linkerd or EKS security tooling. • SEON Technologies collects and processes personal data in accordance with applicable data protection laws. If you are a European Job Applicant see the privacy notice https://apply.workable.com/seon-technologies-1/gdpr_policy?lng=en for further details.
Responsibilities
• Build evidence pipelines against AWS, GitHub, CI/CD and identity tooling so controls are verified by code rather than by hand, and choose and run compliance automation tools. • Automate access reviews across AWS IAM, Google Workspace, GitHub and core SaaS tools, and build self-service paths for routine access requests together with the Platform and IT teams. • Harden and remediate IAM at scale: unused roles, excessive permissions, long-lived credentials, root and break-glass access. Move us towards short-lived, scoped identities with a named owner, for humans, workloads and AI agents. • Ship Terraform and CI guardrails: secret scanning on code and state, policy checks on plan, signed container images, enforced baselines on new accounts and clusters. • Take part in the team's on-call and triage rotation: investigate alerts from GuardDuty, Security Hub, WAF and Kubernetes, handle vulnerability and bug bounty reports, and contain and close incidents. • Write and tune detections across CloudTrail, GuardDuty, WAF and Kubernetes signals, and contribute to cross-signal correlation and AI-assisted triage. • Validate pentest and vulnerability remediations, review infrastructure and IAM changes, and contribute to threat models of new services and AI features. • Lead our ISO 27001, ISO 42001, SOC 2 and PCI DSS programmes: a single control framework mapped across standards, scoping, gap analysis, auditor liaison, remediation tracking and surveillance cycles. • Own customer security questionnaires and vendor security reviews, maintain our trust material, and develop our AI-assisted questionnaire tooling. • Keep policies and the risk register current and readable, and translate upcoming obligations (DORA, EU AI Act, regional financial regulators) into concrete engineering work.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT