checkout.com - Cloud Platform Security Engineer

London, United Kingdom, Hybrid5mo ago

In Office Senior EMEA Payments Cloud Computing Security Engineer Cloud Engineer Senior DevOps Engineer Solutions Architect Bash Python AWS GCP Azure

Requirements

• 6+ years of hands-on experience securing AWS, Azure, and GCP environments, including Azure Policy, IAM, Infrastructure-as-code (IAC) security or other cloud native tooling. • Experience with security tools: Microsoft Sentinel, SentinelOne, NetSkope, Flashpoint, Wiz or similar tooling. • Strong Microsoft Sentinel expertise: KQL, detection rules, workbooks, and logging pipelines. • Working knowledge of DLP and threat intelligence monitoring. • Experience applying AI/ML to security workflows - automated triage, behavioural analytics, or LLM-assisted investigation. • Understanding of AI security risks and frameworks: OWASP LLM Top 10, NIST AI RMF. • Scripting proficiency in Python, PowerShell, or Bash for security automation. • Strong grasp of PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud. • AZ-500, AWS Certified Security – Specialty, or equivalent cloud security certification. • Experience integrating ATT&CK Navigator into SOC workflows. • It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. • Life at Checkout.com http://Checkout.com • We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. • Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. • For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/

Responsibilities

• Develop and enforce reference security architectures, patterns, and blueprints for secure cloud adoption across AWS, Azure, and GCP. • Conduct security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift. • Partner with Engineering teams to embed security guardrails early in design, ensuring compliance and resilience without adding friction. • Evaluate engineering and platform architecture proposals, identifying security gaps and seeing remediation through to completion. • Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS. • Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. • Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. • Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision-making.