Cloud Security Engineer

Cloud Security Engineer

Edinburgh - Hybrid

ClearScore is a workplace like no other. We’ve spent the past five years disrupting an entire industry and building a user base of millions. At the heart of this success is our culture, where we work hard, relish change and treat each other with respect, helping everyone to reach their potential and deliver results that make a difference.

We’re on a mission to positively impact the lives of our users. Our product puts their needs at the centre of our thinking. Through cutting-edge tech, insightful analytics and beautiful design we want to help our users build their financial confidence and make better financial decisions.

We want our people to perform at their best, so we trust everyone to work in a way that suits them—focusing on output, not time spent at a screen. We have an inclusive culture where everyone is encouraged to look after their own wellbeing whilst growing and developing their career.

The role

ClearScore is expanding and to enable our security maturity journey we are hiring a newly created role into our security team. The team is responsible for all cyber and information security, covering vulnerability management, tooling implementation and monitoring, user awareness and proactive threat hunting. Joining the security ream gives you the chance to sit at the heart of an exciting tech culture, exploring best in class tools to solve challenging problems. We’re looking for self-motivated problem solvers with backgrounds in security or operations. We use a full range of tools, and always introducing new tools and techniques to achieve a high level of security. While prior experience is beneficial, we’re looking for people with strong fundamentals in cloud environments, security tooling and network security, with the belief that specific technological tooling and implementations can be picked up by the right candidate.

Requirements

• Strong experience working with cloud solutions (IaaS, SaaS, Serverless)
• Strong knowledge of AWS security principles, including IAM roles

• High-level understanding of security principles, control frameworks (NIST), threat modelling, and security risks as they apply to cloud solutions
• Previous cyber security experience, including security investigation and follow through on threats and bad actors
• Awareness of common security vulnerabilities (e.g. OWASP Top 10, CWE/SANS top 25)
• Ability to think critically and qualify assessments with solid communications skills
• Previous experience with Firewalls, IDS, IPS, XDR solutions
• Understanding of Infrastructure as Code, Kubernetes, Containers, CI/CD, SecOps, DevSecOps
• Experience conducting security reviews, testing of software/infrastructure components
• Scripting language knowledge, such as Python, NodeJS and GoLang
• Have or aiming to have security certification (e.g. CISSP, CEH, GSEC, OSCP, CCSP)
• Experience with event management, SIEM, SOAR tooling
• Experience with DAST/SAST tooling
• Proactive, hands-on approach to security, ability to prioritise and execute with minimal direction or oversight

Benefits

• 25 paid holidays and a “duvet day” on your birthday
• Private health and dental cover
• GP office visits
• Life assurance scheme
• Up to 6% matched pension
• Generous maternity and paternity plans
• Generous training allowance
• Leadership-led training
• Regular wellbeing events
• In-house psychotherapist
• Access to Perkbox
• Dog-friendly office
• Daily breakfast and free snacks
• Free sports and social clubs
• Fast progression
• Physical and mental health support through BUPA
• No clock-watching culture
• Culture and inclusion representatives
• Lunch and Learns with guest speakers

Inclusion Policy

We are always looking for talented individuals to join ClearScore. We are an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for our people. Please see our People Policy Notice at https://www.clearscore.com/people-notice.