Location
London

Hours
Full Time

Salary
Negotiable

About the Role
Flo Health is the world’s #1 health & fitness app for female health, with over 500 million downloads and 80 million monthly users. Backed by a $200M investment and valued at $1B in 2024, Flo is building the next generation of AI-powered, privacy-first, clinically backed digital health solutions. As a Cloud Security Engineer on the Velocity Internal Platform team, you will ensure that every system, pipeline, and tool engineers rely on is secure by default, enabling fast delivery without compromising trust.

The Velocity team builds and owns the foundational cloud infrastructure, developer tooling, and SRE practices to eliminate friction. Your mission will be to embed security and compliance into the platform, automate security-as-code across infrastructure and CI/CD pipelines, and drive container lifecycle security.

You will own and strengthen Flo’s AWS security posture using tools like GuardDuty, Inspector, Security Hub, and SSM Patch Manager. You will harden container image security end-to-end, manage CI/CD security policies programmatically, build security observability dashboards, and support infrastructure for industry-leading privacy features such as the TIME-recognised "Anonymous Mode." You will also shape Flo’s security culture through documentation, collaboration, and thought leadership.

Flo offers a mission-led, product-driven environment where autonomy, ownership, and craftsmanship are valued. You will work with cutting-edge security tooling at massive scale, protecting the health data of millions of users worldwide.

Experience
7+ years in Infrastructure Security, Cloud Security, or Security Engineering roles.
Deep expertise in AWS security services and best practices.
Proficient in Infrastructure as Code tools such as Terraform and Terragrunt.
Strong knowledge of Kubernetes security, container image hardening, and admission control.
Solid understanding of identity management principles including SSO, OAuth, JWT, and SAML.
Experience scripting in Python, Bash, or similar languages to automate security workflows.
Understanding of modern network security principles.
Experience integrating Secure Software Development Lifecycle (SSDLC) phases into engineering workflows.

About you
Detail-oriented and proactive security engineer with a passion for automation and secure infrastructure.
Collaborative team player who can engage cross-functionally to promote security culture.
Comfortable working in a fast-paced, mission-driven environment.
Committed to protecting user privacy and data security at scale.

Qualifications
Professional accreditations such as AWS Security Specialty, Certified Kubernetes Security Specialist (CKS), or CISSP are highly desirable.
Bonus points for experience with security monitoring and event correlation systems (IDS/IPS, SIEM, AWS-native tooling), knowledge of Zero Trust Architecture, secret management tools, multi-cloud environments (AWS and GCP), and business continuity principles (BIA, DRP).