Security Engineer III – Security Operations

About the role

Join a globally distributed engineering team focused on protecting critical cloud infrastructure and strengthening security operations within a modern payments environment. As a Security Engineer III you will own detection and response capabilities, build SIEM detections, automate workflows and develop security tooling.

Key responsibilities

• Design, implement and tune security detections across Elastic SIEM and AWS environments.
• Investigate alerts, triage incidents, document findings and drive resolutions.
• Develop automation workflows and runbooks using Python and no‑code tools such as Zapier or Tines.
• Maintain audit‑ready controls for SOC 2, PCI DSS and other compliance frameworks.
• Use Terraform and Python to build and improve infrastructure supporting security tooling.
• Participate in on‑call rotation for security monitoring and incident response.

Required profile

• Hands‑on experience in security operations and cloud‑native threat detection.
• Ability to work independently, prioritize security issues and communicate risks clearly.
• Willingness to participate in on‑call rotation.

Required skills

• Python scripting and automation.
• Terraform or other IaC technologies.
• Elastic SIEM (preferred) or comparable platforms such as Splunk, Microsoft Sentinel.
• AWS security and cloud‑native detection.
• MITRE ATT&CK framework knowledge.

What we offer

• Fully remote work within a globally distributed team.
• Competitive equity share options.
• Flexible holiday policy (minimum 25 days).
• Home office support (£500 contribution) and high‑quality equipment.
• Learning budget, private medical insurance and additional location‑based perks.