Location
London

Hours
Full Time - Core business hours with participation in a rotating on-call schedule outside of core hours and weekends to ensure swift resolution of security incidents.

Salary
Competitive salary package

About the Role
The UK Security Operations (SecOps) team in Google Public Sector delivers, operates, and secures private cloud services designed to meet exceptionally high security requirements. As a Security Platform Engineer, you will play a critical role in designing, building, and managing cloud-native security platforms with a strong emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering, developing scalable tooling, automating security controls, and enabling robust detection and response capabilities across our cloud infrastructure. This hands-on engineering role requires deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will collaborate closely with Incident Response Engineers and platform teams to ensure security is seamlessly integrated into infrastructure and operational workflows.

Experience
- Deploying, configuring, and managing cloud security platform tools including Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and Cloud Workload Protection Platforms (CWPP).
- Developing and implementing security monitoring and logging strategies.
- Investigating and analysing security incidents, identifying root causes, determining impact scope, and executing containment and remediation.
- Performing forensic analysis to investigate suspicious activity.
- Automating security tasks and workflows to improve efficiency and effectiveness.
- Strong experience with Kubernetes security including workload isolation, RBAC, network policies, containerisation, orchestration, and observability tools such as Falco, Prometheus, and Grafana.
- Technical troubleshooting and scripting skills in Python, Go, or Bash.
- Familiarity with infrastructure-as-code and configuration management tools like Terraform, Helm, and ArgoCD.

About you
You are a technically skilled security engineer with a passion for cloud-native security and automation. You thrive in a fast-paced environment where security and engineering intersect. You are comfortable working collaboratively with cross-functional teams and participating in on-call rotations to maintain high security standards. British Citizenship is required as eligibility to obtain UK Developed Vetting (DV) security clearance is mandatory.

Qualifications
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
- Minimum 5 years of experience in security engineering, DevSecOps, or platform engineering roles.
- Preferred certifications include GSEC, CISSP, CISM, OSCP.
- Experience with Kubernetes threat detection, anomaly detection, and service mesh security concepts such as Istio and Linkerd.
- Background in detection engineering, logging pipeline development, or SIEM tuning in containerised environments is advantageous.
- Contributions to security-focused open-source projects or internal security platform tooling are a plus.
- Current and active UK Developed Vetting (DV) Security Clearance is preferred but not mandatory at application.