Senior/Lead Cloud Security Engineer

Flohealth · Londonsenior

En corto

▸Ingeniero de seguridad en la nube que construye infraestructura segura por defecto en AWS para una app de salud femenina a escala global.
▸Se enfoca en automatizar seguridad en CI/CD, contenedores y políticas de código con herramientas como Kyverno, Terraform y Copacetic.
▸Destaca por integrar seguridad desde el principio en un equipo de plataforma que impulsa el rápido desarrollo sin sacrificar privacidad.

Experiencia en inglés en entornos tecnológicos y colaboración internacional.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

¿Qué piden?

✓7+ años en seguridad de infraestructura, seguridad en la nube o ingeniería de seguridad.
✓Experiencia profunda con servicios de seguridad de AWS (GuardDuty, Inspector, Security Hub, SSM Patch Manager).
✓Dominio de Terraform y Terragrunt para gestión de infraestructura como código.
✓Conocimiento sólido de seguridad en Kubernetes, imágenes contenedores y políticas de admisión.
✓Capacidad para automatizar flujos de seguridad con Python, Bash o lenguajes similares.
✓Conocimiento en gestión de identidad (SSO, OAuth, JWT, SAML) y políticas de acceso.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

AWSGuardDutyInspectorSecurity HubSSM Patch ManagerCopaceticCosignSigstoreKyvernoCheckov

¿A quién escribirle en Flohealth?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

500M+ downloads. 80M+ monthly users. A decade of building – and we’re still accelerating. Flo is the world’s #1 health & fitness app worldwide on a mission to build a better future for female health. Backed by a $200M investment led by General Atlantic, we became the first product of our kind to reach a $1B valuation in 2024 – and we’re not slowing down. With 7M paid subscribers and the highest-rated experience in the App Store’s health category, we’ve spent 10 years earning trust at scale. Now, we’re building the next generation of digital health – AI-powered, privacy-first, clinically backed – to help our users know their body better. The job The Scale of the Challenge At Flo we don't just have users, we have a global community. We are the #1 women's health app, in the last month alone, we saw 8.6M new installs and a 2.8M increase in active users. When millions of people trust you with their most personal health data, security isn't a feature — it's a foundation. We are looking for a Cloud Security Engineer to join Velocity , our Internal Platform team. Your mission is to ensure that every system, pipeline, and tool our engineers rely on is secure by default — so they can ship fast without ever compromising trust. The Mission: Velocity The Velocity team exists to eliminate friction. We build and own the foundation everything else runs on: cloud infrastructure, developer tooling, and SRE practices. You will: • Embed Security Into the Platform: Bake security, compliance, and best practices into the core stack so they're invisible to developers and impossible to skip. • Automate Everything: Drive security-as-code across infrastructure, CI/CD pipelines, and container lifecycles — making manual gates a thing of the past. What You Will Do • Cloud Security Posture: Own and continuously strengthen Flo's AWS security posture using tools like GuardDuty, Inspector, Security Hub, and SSM Patch Manager. • Container & Supply Chain Security: Harden container image security end-to-end — patch vulnerabilities automatically with Copacetic, sign and verify images with Cosign/Sigstore, and enforce policies at admission with Kyverno. • Policy as Code: Manage CI/CD security across the organisation using policy-as-code tooling (Kyverno, Checkov), ensuring standards are enforced programmatically. • Security Observability: Build visibility into security performance by measuring and visualising actionable metrics using tools like Databricks Dashboards or Looker. • High-Scale Privacy: Support the infrastructure for industry-leading privacy features, such as our TIME-recognised "Anonymous Mode." • Culture & Thought Leadership: Shape Flo's broader security culture through proactive engagement, documentation, and cross-team collaboration. What You Bring • Experience: 7+ years in Infrastructure Security, Cloud Security, or Security Engineering roles. • Cloud Native Mastery: Deep expertise in AWS security services and best practices is essential. • Infrastructure as Code: Proficient in Terraform and Terragrunt — you run everything as code. • Container Security: Strong knowledge of Kubernetes security, image hardening, and admission control. • Identity & Access: Solid understanding of identity management principles — SSO, OAuth, JWT, SAML. • Automation Mindset: Comfortable scripting in Python, Bash, or similar to automate security workflows.</

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.