Senior Security Engineer (AWS)
London, United Kingdom
IAG Loyalty
Who we are đ©”Â
Weâre the people behind the global loyalty currency, Avios, and home to three ambitious, growing businesses; IAG Loyalty, British Airways Holidays and The Wine Flyer. Each business has its own goals and strategy, but collectively we create brilliant experiences for our global customers.Â
Weâre on a truly exciting journey of growth and transformation â weâre going places! This is where you come in.
The Opportunity âš
IAG Loyalty is fast becoming a Platform as a Service business. As a result, we are looking for a highly capable individual to join our security team. The candidate will have a strong technical background and experience in implementing best practice security controls within cloud and DevOps. They will be comfortable working in a cloud-native environment where high rates of technology change are the norm. We are looking for someone who can lead the delivery of a number of our security engineering objectives, be responsible for the effective operation of the tools that help keep our organisation secure and manage a small team of security engineer.
This role is based out of our London office. We call our approach to hybrid working The Blend â itâs about giving you the flexibility to choose where you do your best work, while staying connected with your team and the wider business. This means you will be required to spend at least two days per week in the office, with the rest of the time working from home. You may also be required to work from one of our other office or partner locations, based on your role and 'to do' list.
What youâll be doing đ
You will lead the Platform Security practice within our security team, driving key initiatives to enhance the security of our cloud platform and software development lifecycle. This involves coordinating and contributing to continuous security improvements, developing secure-by-default patterns for engineering teams, and maintaining critical security tools such as CSPM and CNAPP.
In addition, youâll write scripts and build automation tools to streamline security activities, work cross-functionally to ensure effective monitoring and incident response, and collaborate closely with product teams to provide guidance and encourage adoption of security best practices. Youâll also take part in an on-call rotation to support timely and effective incident response when needed.
What weâre looking for đĄ
Cloud engineering experience with security tooling and cloud workload protection
Skilled in DevOps, AWS, Infrastructure as Code (Terraform), and scripting (Python, Bash)
Knowledge of secure engineering standards (OWASP, CIS, NIST) and Agile/DevOps practices
Experienced with CSPM, CNAPP, security incident response, and SIEM tools
Ability to evaluate and recommend new security technologies
Clear communicator focused on enhancing developer experience
Calm, evidence-based decision-making under pressure
Entrepreneurial, goal-oriented, and innovative
Comfortable sharing best practices across the organisation
We might not be right for you if:Â
You only want to focus on your to-do list; weâre a small, high-performing team, we help each other to succeed.Â
You value perfection over fast iteration and progress; IAG Loyalty moves fast, we learn and iterate as we go; our environment isnât right for everyone.Â
Youâre looking to create but not build; this is an end-to-end role, you need to be comfortable owning your space, from ideation through to delivery and review.Â
If you think you have what it takes but don't meet every single point above, please do still apply. We'd love to chat and see if you could be a great fit.
Equity, Diversity and Inclusion at IAG Loyalty
Our vision, 'to create the world's most rewarding experiences,' applies not only to our customers but for our colleagues too. It's about taking belonging seriously, actively fostering a culture where everyone feels welcomed and valued by embracing diverse identities, personal histories, and perspectives.
This commitment makes IAG Loyalty a rewarding place to work and enhances our ability to solve complex problems, drive innovation, and better serve our customers and communities.
Please let us know if we can make any reasonable adjustments to support your interview process with us.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index đ°
Tags: Agile Automation AWS Bash Cloud CNAPP CSPM DevOps Incident response Monitoring NIST OWASP Python Scripting SDLC SIEM Strategy Terraform
Perks/benefits: Career development
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.