Staff Cloud Security Engineer

📋 Job Overview

At Engine by Starling, we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. Starling has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success.

🏢 About Engine by Starling

Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together!

🎯 The Role

The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.

✅ Key Responsibilities

• Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture)
• Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code
• Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place
• Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS
• Drive security infrastructure deployments across our growing environments
• Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions
• Lead incident response efforts, including investigation and remediation of security breaches
• Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams

📌 Required Qualifications

• Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record
• Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls
• A deep understanding of GCP IAM and its limitations
• Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL)
• Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus)
• Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform
• Experience configuring GCP-native security posture and threat management with Security Command Center
• Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis
• Experience with key and secret management

🎁 Benefits

Competitive

🛂 Visa & Eligibility

Not specified