Cloud Security Engineer

Fimador are currently seeking a highly motivated and experienced Senior Security Engineer to join an established engineering team. In this role, you’ll play a critical part in embedding secure software development practices into their platforms and products that power one of the biggest ecosystems.

While this is an individual contributor role, you'll lead by influence—shaping secure development culture, mentoring team members, and driving accountability across engineering teams.

You will work cross-functionally to build strong relationships, promote secure design principles, and continuously improve the way security is integrated into their development lifecycle.

Duties:

• Lead security initiatives and drive secure development improvements in collaboration with engineering, product, and operations teams.
• Act as a security coach and technical leader, mentoring teams on best practices while challenging them to exceed compliance and security expectations.
• Partner with Product Managers, Engineering Leaders, and stakeholders to prioritise security deliverables and integrate them into product roadmaps.
• Identify and resolve process inefficiencies to improve secure development workflows.
• Champion industry-leading security practices
• Ensure compliance with evolving regulations and global standards
• Assess and quantify security risks and their potential business impacts
• Guide the implementation of effective and scalable security controls

What Success Looks Like:

• Deep expertise in AWS security best practices, including gap analysis, remediation planning, and architecture reviews to ensure "security by design" and "privacy by default" principles.
• Collaborate with external security partners to conduct penetration testing and manage results—removing false positives and translating validated findings into actionable improvements for engineering teams.
• Conduct and lead threat modeling activities to identify real-world attack vectors and apply pragmatic controls that reduce risk.
• Support incident response efforts, assist in the development of remediation plans, deploy fixes, and communicate mitigations to both internal and external stakeholders.
• Ensure adherence to financial and data privacy regulations, such as GDPR, ISO 27001, ISO 27017, HIPAA, and emerging regulations like the EU AI Act and Data Act.

Preferred Qualifications:

• AWS Security Specialty Certification or equivalent experience demonstrating deep knowledge of cloud security practices
• Experience with security configuration and compliance management for data platforms such as Databricks
• Strong familiarity with DevOps workflows and CI/CD pipelines, particularly within regulated environments requiring strict compliance and auditability (e.g., financial services, healthcare, or other high-assurance domains)