Source Job

UK

  • Lead Olo's Blue Team, providing strategic and technical oversight for information protection, incident detection and response, and security services.
  • Own and optimize security programs, including vulnerability management, threat hunting, and non-event driven security reviews.
  • Collaborate cross-functionally with customers, partners, and internal teams to strengthen security posture and mitigate risks.

Security Engineering Incident Response Vulnerability Management AWS Kubernetes

20 jobs similar to Staff Security Engineer - Blue Team (UK)

Jobs ranked by similarity.

US

  • Lead threat modeling and security reviews across Wiz's products and cloud infrastructure, identifying attack surfaces and developing scalable mitigation strategies.
  • Build automation, policy-as-code, and security tooling that enables development teams to 'shift left' and integrate end-to-end security into their workflows.
  • Drive vulnerability management and remediation efforts, prioritizing issues, implementing mitigations, and designing strategic preventative controls in software supply chains from development through production.

Wiz is redefining security for the AI era, enabling teams to secure cloud and AI applications by connecting code, cloud, and runtime into a single shared context. As one of the fastest-growing startups ever, we are trusted by over 65% of the Fortune 100 and scan over 230 billion files daily, with a culture that values world-class talent and is now powered by Google.

  • Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
  • Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
  • Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.

Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.

$120,000–$150,000/yr
US

  • Fix vulnerabilities across the stack by writing pull requests in application repositories and Terraform.
  • Build and tune SIEM detections, mapping coverage to MITRE ATT&CK and reducing false positives.
  • Lead incident response, harden AWS estate, and automate security workflows with code.

Cloudbeds is a hospitality management platform powering hotels across 150 countries, processing billions in bookings annually. The company is a remote-first team of 650+ across 40+ countries, recognized for innovation and an inclusive culture.

UK

  • Lead and grow a team of security engineers focused on protecting cloud-native environments and CI/CD pipelines.
  • Drive technical strategy, threat modeling, and security automation across multi-cloud infrastructure.
  • Partner with engineering and DevOps teams to embed secure-by-design principles and manage vulnerability and supply chain security.

Wiz is a cybersecurity company that provides a cloud security platform connecting code, cloud, and runtime to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and now powered by Google, with a culture that values world-class talent.

$214,200–$308,000/yr
US

  • Serve as deputy to the CISO, representing security to executives, customers, and regulators.
  • Lead and grow managers and senior engineers across Security Engineering and Security Operations.
  • Own the security roadmap, including cloud security, detection and response, identity, and platform security.

Abnormal Security uses behavioral AI to protect organizations from sophisticated email and collaboration attacks. Trusted by 5,000 enterprises, the company values security engineering, partnership, and a paved-path approach to reducing risk.

$151,000–$178,500/yr
US

  • Architect and harden AWS, serverless, data, and EKS with Infrastructure-as-Code.
  • Secure APIs, SDLC, and video platform; run vulnerability and pen testing.
  • Own SOC 2, HIPAA, AI security governance, and incident response.

AnswersNow is a venture-backed digital health company delivering virtual autism care to families. The company is a remote-first, high-growth startup focused on making personalized therapy more accessible.

Brazil Unlimited PTO

  • Lead security incident response end-to-end across cloud, identity, and workload logs.
  • Build and tune SIEM detections in Datadog across AWS, Kubernetes, and Google Workspace.
  • Automate detection and response tasks using Python and Terraform, and mentor engineers.

Loadsmart is a logistics technology company reinventing freight by helping shippers, brokers, warehouses, and carriers move more with less. It is a growth-stage tech unicorn valued at over $1 billion, with a globally distributed remote team.

US

  • Get hands-on with our Go codebase, AWS and Kubernetes environment, SIEM, and security services, contributing security feedback to design docs and shipping your first fix or detection.
  • Own a security domain end to end, such as cloud hardening or detection engineering, and ship reusable Go security middleware adopted by service teams.
  • Drive multi-quarter initiatives like default-deny networking, expand Kubernetes security, and automate compliance evidence for audits.

Bastion provides regulated infrastructure for businesses to hold, move, and issue stablecoins, combining custodial wallets, payment orchestration, and issuance. As a 40-person startup, we operate through our own regulated entities with built-in compliance and risk controls.

$150,000–$175,000/yr
US Unlimited PTO

  • Lead and mentor a high-performing Security Engineering and CloudSecOps team, defining the security engineering roadmap and ensuring resilient security controls across cloud, hybrid, and enterprise environments.
  • Partner with IT, DevOps, Engineering, and Product to embed secure-by-design practices, automate security monitoring, and drive incident readiness and vulnerability management.
  • Own cloud security architecture, identity and access management, and security tooling across AWS, Azure, GCP, and hybrid infrastructure to align with business risk tolerance.

symplr provides a healthcare operations platform that drives effective, efficient, and connected workflows. This remote-first company has employees across the US, India, and the Netherlands, guided by values of teamwork, customer focus, and integrity.

$200,000–$250,000/yr
US

  • Mature and lead Security & Threat Operations, setting the operating model and roadmap for threat detection, investigation, and incident response.
  • Own detection engineering, monitoring, digital risk, exposure management, and security controls across AWS and corporate environments.
  • Act as Incident Commander during significant security incidents and partner with engineering, DevOps, and product teams to drive defensive improvements.

DriveWealth is a global B2B fintech that democratizes investing through an API-powered trading platform. The company blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street.

US Unlimited PTO

  • Lead the technical vision for platform hardening across AWS and GCP, including tier-0 access and secrets services.
  • Own the hardening roadmap for critical cloud infrastructure and drive operational excellence with rigorous on-call practices.
  • Mentor a global team of engineers and partner cross-functionally to build secure-by-default controls.

DoorDash is a technology and logistics company building the most reliable delivery network for consumers, merchants, and dashers. The company is growing rapidly and fosters a culture of learning, customer obsession, and inclusive leadership.

India

  • Own security architecture across Azure and AWS, covering tenant design, network segmentation, and workload isolation.
  • Raise the engineering bar with hardened infrastructure-as-code modules, secure defaults, and policy-as-code signals at commit time.
  • Own vulnerability and exposure management end to end, delivering findings as pull requests, not tickets.

One Identity enables organizations to secure, manage, monitor, protect, and analyze information and infrastructure to drive innovation. With a globally distributed team, we build enterprise products at scale and foster a collaborative, improvement-driven culture.

$120,000–$150,000/yr
US

  • Protect cloud infrastructure, applications, and customer data across a modern technology environment.
  • Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
  • Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.

Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.

North America

  • Partner with Fortune 500 customers to address security concerns and accelerate platform adoption.
  • Develop security reference architectures and perform threat modeling for ServiceNow products and AI services.
  • Lead security deep dives covering cloud-native architectures, identity, encryption, and AI security controls.

ServiceNow is an AI platform that helps enterprises automate workflows and reinvent business processes. The company serves 85% of the Fortune 500 and fosters an AI-native culture where technology and talent work together.

EMEA

  • Identify and mitigate security gaps in infrastructure to improve resilience and reduce risk.
  • Harden infrastructure by applying secure-by-default designs across data, endpoints, tools, and processes.
  • Collaborate with Platform, Engineering, and other Security teams to provide guidance and ad hoc support.

Zapier builds and uses automation to make work more efficient, creative, and human. They are a remote-first, mission-driven company that values diversity, inclusion, and belonging.

Europe US 6w PTO

  • Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
  • Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
  • Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.

n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.

US Unlimited PTO

  • Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
  • Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
  • Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.

Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.

  • Own vulnerability management across code, dependencies, images, and cloud config, automating triage and remediation.
  • Build and expand security gates in CI/CD pipelines, define secure cloud baselines, and drive least privilege identity.
  • Partner with DevOps on paved roads for secure-by-default development and lead incident response.

Aegis AI is a startup founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, focused on stopping adversarial AI attacks. The team is flat, flexible, and fast, with engineers owning decisions and clear KPIs.

$204,500–$330,700/yr
US

  • Lead and manage the Product Security team, shaping a risk-driven security program in partnership with the Director of Security.
  • Guide engineering teams to own their security health, with automation handling first-pass findings and Security validating rather than fixing.
  • Act as incident manager of record, delegated approver, and drive monthly and quarterly security posture reporting.

LaunchDarkly provides a feature management platform that helps developers release software safely and efficiently through gradual rollouts and targeted experiences. The company values high trust, transparency, and a humble, collaborative team culture.

$120,000–$170,000/yr
US

  • Own and improve WellBeam's AWS infrastructure, delivery pipelines, and production reliability with a security-first mindset.
  • Lead SOC 2 and HIPAA technical controls, vulnerability management, and security operations as the internal security lead.
  • Build observability, automate deployments, and strengthen backup, disaster recovery, and incident response across the platform.

WellBeam is a healthcare interoperability platform connecting health systems, physicians, and post-acute providers. It is a remote-first team offering flexible working hours, competitive compensation, and regular company offsites.