Security Engineer III – Security Operations

About the role

Join a globally distributed engineering team protecting critical cloud infrastructure in a modern payments environment. As a Security Engineer III you will own detection and response capabilities, investigate incidents and improve security coverage using Python and infrastructure‑as‑code.

Key responsibilities

• Develop, tune and maintain SIEM detections across Elastic and AWS environments.
• Automate response workflows with Python and no‑code tools such as Zapier or Tines.
• Triage alerts, investigate suspicious activity, document findings and drive incidents to resolution.
• Maintain audit‑ready controls for SOC 2, PCI DSS and other compliance frameworks.
• Use Terraform and Python to build and improve security tooling infrastructure.
• Participate in on‑call rotation for security monitoring and incident response.

Required profile

• Hands‑on experience building and tuning SIEM detections, preferably Elastic.
• Practical experience securing AWS environments and implementing cloud‑native detection.
• Strong Python scripting skills for automation and tooling.
• Familiarity with MITRE ATT&CK framework and incident investigation.
• Ability to work independently, prioritize issues and communicate findings clearly.

Required skills

• Python
• AWS
• Elastic SIEM (or comparable platforms such as Splunk, Microsoft Sentinel)
• Terraform (or other IaC tools)
• MITRE ATT&CK framework

What we offer

• Fully remote work within a globally distributed team.
• Competitive equity share options.
• Flexible holiday policy with a minimum of 25 days.
• Access to coworking spaces in major cities.
• Annual company retreat and workations.
• High‑quality equipment and £500 home‑office setup contribution.
• Generous learning budget and private medical insurance.