Senior Cloud & Information Security Engineer | FinTech | London (Hybrid)
Outside IR35 Contract
The Opportunity We are recruiting on behalf of a leading FinTech firm that is currently scaling its digital infrastructure to meet the demands of the global financial markets. We are seeking a Senior Cloud & Information Security Engineer to take full technical ownership of our client’s security posture and cloud environment.
This is a critical builder role for a security specialist who thrives at the intersection of Infrastructure Engineering and Cyber Defense. You will not just be setting policies; you will be designing, implementing, and operating the secure systems that protect critical financial data.
The Role & Impact
As the technical authority for cloud infrastructure and information security, you will ensure that security-by-design is baked into every deployment:
- Security Ownership: Lead the implementation of day-to-day safeguards, including vulnerability management, hardening, and identity/access controls (MFA, Least Privilege).
- Cloud Infrastructure: Design and maintain resilient cloud environments (Azure/AWS), leveraging Infrastructure-as-Code (IaC) and automation to ensure high availability and encryption.
- DevSecOps: Embed security into the heart of the CI/CD pipeline, supporting secure change management and technical auditability.
- Technical Assurance: Lead the technical side of penetration testing and vulnerability scans, translating findings into robust, concrete technical fixes.
- Incident Response: Act as the Technical Lead during security incidents, driving forensic investigations, containment, and recovery.
Who You Are
- The Technical Hybrid: You have 5-8 years of hands-on experience across both Cloud Engineering and Information Security within the Finance or FinTech sector.
- Infrastructure Expert: You have a deep understanding of cloud networking, configuration management (Terraform/Ansible), and automation tooling.
- Security Minded: You have practical experience applying security frameworks (such as ISO 27001 or NIST) within a high-stakes, regulated environment.
- Regulatory Savvy: You are comfortable providing technical evidence for audits and regulatory reviews (e.g., FCA).
- Qualified: You hold a degree in Computer Science or Data Engineering, ideally supported by certifications such as CISSP, CISM, CCSP, or specific Cloud Security credentials.
Package & Culture
- Location: Central London (Hybrid working model).
- Compensation: Outside IR35, £500-£600 per day
- Environment: A collaborative, engineering-first culture where you are given the autonomy to own the technical security roadmap.