Senior Cloud Security Engineer
Job description
<div class="content-intro"><h2 data-pm-slice="1 1 []">WHO ARE WE</h2>
<p>Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism’s contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</p></div><p><span data-contrast="auto">The </span><strong><span data-contrast="auto">Senior Cloud Security Engineer</span></strong><span data-contrast="auto"> owns the defence and detection of Cognism's cloud environment, reporting to the Director, Security Engineering & Operations. As the senior technical voice on cloud security, you will lead on the development of our cloud security roadmap, and support and mentor the other cloud security engineers on the team. AWS is at the core, but the estate also spans SaaS and managed services: source control, edge and networking, databases, data streaming and messaging, and secure access.</span></p>
<p><span data-contrast="auto">As we move from software to infrastructure that customers and their AI agents depend on, our attack surface grows: more APIs, an MCP connector, and data pipelines feeding our proprietary data engine. You will be the engineer who knows which threats matter most to Cognism's cloud infrastructure, and who builds the controls, detections and automation that stop them.</span></p>
<p><span data-contrast="auto">This is a hands-on, blue-team role where </span><strong><span data-contrast="auto">automation is the default and AI is a force multiplier</span></strong><span data-contrast="auto">. You would rather write the code that closes a gap than raise a ticket about it, and you use AI wherever it genuinely speeds up triage, detection engineering, investigation or remediation. You will work closely with Platform, Data Engineering, IT and our 24/7 SOC partner, as a partner to engineering, not a gatekeeper.</span><span data-ccp-props="{"335559739":120}"> </span></p>
<p> </p>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">WHAT YOU'LL OWN</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":300,"335559739":120}"> </span></p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Cloud </span><span data-ccp-parastyle="heading 2">Security Roadmap</span><span data-ccp-parastyle="heading 2"> & </span><span data-ccp-parastyle="heading 2">Controls</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Lead our cloud security roadmap: assess where we are exposed, recommend priorities by threat and business impact, agree the plan with the Director and Engineering leaders, and execute or support on delivery.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Work with the Platform team to harden our AWS environment across all accounts, and the other technologies that protect our cloud infrastructure, monitoring continuously for misconfiguration and drift.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Advise the Director of IT Ops on hardening and monitoring our corporate cloud infrastructure, with IT owning day-to-day operation.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">Partner with the Director of IT Ops and our Platform team on our EDR platform, as our MDR provider, runs detection and response, and IT and Platform own deployment. Security ensures the configuration is right, including policies, exclusions and response settings, and that coverage across endpoints and servers has no gaps.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">Stay highly threat-aware: understand Cognism's highest threats, and recommend and embed the controls that mitigate them, prioritising by real-world impact and exploitability rather than coverage.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="auto">Govern the patch management process for cloud workloads, containers and infrastructure, from scanning and risk-based prioritisation through to verified closure.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="auto">Review major architecture changes with Platform and Engineering, building guardrails into pipelines rather than relying on manual review of changes.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="auto">Partner with our Identity and Access Management expert, to govern the access model for our cloud and engineering systems: design how identity and authorisation work across the estate, with preventive guardrails that enforce least privilege by default.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="9" data-aria-level="1"><span data-contrast="auto">Work with Data Engineering to ensure our data infrastructure is secure, covering how we ingest, process, access and surface data.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="10" data-aria-level="1"><span data-contrast="auto">Partner with the Senior Application Security Engineer so that cloud, API and application controls reinforce each other.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p><span data-ccp-props="{"335559685":540,"335559739":60}"> </span></p>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Logging, Detection</span><span data-ccp-parastyle="heading 2">, Response</span><span data-ccp-parastyle="heading 2"> & SOC Partnership</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="11" data-aria-level="1"><span data-contrast="auto">Ensure all critical infrastructure is logged and monitored by our 24/7 SOC. Own log ingestion and logging configuration across cloud and application sources, so the SOC gets the right data with the right coverage, quality and retention.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1"><span data-contrast="auto">Act as the main technical partner to the SOC: give them the business and environment context they need to tune detections and response, review alert quality with them, and keep improving how we detect, triage and respond together.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="13" data-aria-level="1"><span data-contrast="auto">Partner with the rest of the security engineering team and our 24/7 SOC to automate response to infrastructure and identity-related incidents, using AI where it genuinely speeds up triage, enrichment or remediation.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="14" data-aria-level="1"><span data-contrast="auto">Lead investigation and containment for cloud and identity incidents, with the SOC and wider security team covering the rest, and turn post-incident reviews into new controls.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Automation & AI-Enabled Security Engineering</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="15" data-aria-level="1"><span data-contrast="auto">Make automation the default: infrastructure-as-code, detection-as-code, policy-as-code, automated remediation and self-serve guardrails.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="16" data-aria-level="1"><span data-contrast="auto">Use AI tooling to do more with less, in triage, detection authoring, investigation and vulnerability analysis. Measure what works, and retire what doesn't.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="17" data-aria-level="1"><span data-contrast="auto">Help the team build safe, repeatable patterns for using AI in security operations.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Compliance & Evidence</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="18" data-aria-level="1"><span data-contrast="auto">Own the ISO 27001 and SOC 2 Type II evidence for the controls you build and run, so it is ready rather than collected at the last minute.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p> </p>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">WHAT WE NEED</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":300,"335559739":120}"> </span></p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Technical foundation</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="19" data-aria-level="1"><span data-contrast="auto">Strong AWS security skills: multi-account guardrails, IAM policy design, network security, encryption and the native security services.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="20" data-aria-level="1"><span data-contrast="auto">Strong automation skills: Python or similar, Terraform and CI/CD, and hands-on experience using AI tooling to do more with less.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="21" data-aria-level="1"><span data-contrast="auto">Hands-on experience working with a SOC on log source onboarding, alert tuning and response automation.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="22" data-aria-level="1"><span data-contrast="auto">Familiarity with EDR/MDR platforms, including reviewing policy and configuration.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="23" data-aria-level="1"><span data-contrast="auto">Solid incident response fundamentals in cloud environments.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="24" data-aria-level="1"><span data-contrast="auto">Working understanding of how APIs and agent-facing interfaces (such as MCP) are attacked, and which controls reduce that risk.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="25" data-aria-level="1"><span data-contrast="auto">Practical understanding of data platform security: how data is ingested, processed, accessed and surfaced securely.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Collaboration & influence</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="26" data-aria-level="1"><span data-contrast="auto">Support and develop the other cloud security engineers: set technical standards, review designs and detections, share context on priorities, and help them grow.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="27" data-aria-level="1"><span data-contrast="auto">Partner to Platform, Data Engineering, IT and the SOC: you earn trust by making the secure path the easy path, not by raising blockers.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="28" data-aria-level="1"><span data-contrast="auto">Able to explain threats and trade-offs clearly to engineers, IT leaders and non-technical stakeholders.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="29" data-aria-level="1"><span data-contrast="auto">Comfortable giving the SOC and engineering teams the context they need, and holding them to account on outcomes.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Mindset</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="30" data-aria-level="1"><strong><span data-contrast="auto">Threat-aware and risk-based:</span></strong><span data-contrast="auto"> you can tell a theoretical risk from a real business threat, and prioritise by impact and exploitability, not CVSS score alone.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="31" data-aria-level="1"><strong><span data-contrast="auto">Automation-first:</span></strong><span data-contrast="auto"> you default to code, guardrails and automated response over manual process and tickets.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="32" data-aria-level="1"><strong><span data-contrast="auto">Curious about AI:</span></strong><span data-contrast="auto"> you see it as both a new threat landscape and a way to make security faster and smarter.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="33" data-aria-level="1"><strong><span data-contrast="auto">Pragmatic bias toward action:</span></strong><span data-contrast="auto"> you sequence work sensibly, ship, learn and improve.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="34" data-aria-level="1"><strong><span data-contrast="auto">Ownership:</span></strong><span data-contrast="auto"> you own your controls end to end, from design to evidence.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p> </p>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">WHAT SUCCESS LOOKS LIKE</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":300,"335559739":120}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="35" data-aria-level="1"><span data-contrast="auto">A prioritised, threat-led cloud security roadmap is agreed with Security leadership and Engineering and is being delivered, and the other cloud security engineers are clear on priorities and growing in capability.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="36" data-aria-level="1"><span data-contrast="auto">AWS guardrails are in place across all accounts, and drift is measured rather than guessed at.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="37" data-aria-level="1"><span data-contrast="auto">Our highest threats are mapped to controls and SIEM detections, and the gaps are visible and being closed.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="38" data-aria-level="1"><span data-contrast="auto">Critical infrastructure is logged and monitored by the SOC. The log coverage gaps that matter are closed, and SOC alert noise is noticeably lower.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="39" data-aria-level="1"><span data-contrast="auto">Common infrastructure and identity incidents are handled by automated response.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="40" data-aria-level="1"><span data-contrast="auto">CrowdStrike is correctly configured and covers the whole estate, with IT, Platform and Security clear on who owns what.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="41" data-aria-level="1"><span data-contrast="auto">Data infrastructure controls are agreed and embedded with Data Engineering.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="42" data-aria-level="1"><span data-contrast="auto">AI is used in day-to-day security work with a measurable effect, such as faster triage or less manual effort.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="43" data-aria-level="1"><span data-contrast="auto">The controls you own pass ISO 27001 and SOC 2 audits, with evidence ready rather than collected at the last minute.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p> </p>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">EXPERIENCE</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":300,"335559739":120}"> </span></p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Typical background</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<table data-tablestyle="MsoNormalTable" data-tablelook="1184">
<tbody>
<tr>
<td data-celllook="69905">
<p><strong><span data-contrast="auto">Area</span></strong><span data-ccp-props="{}"> </span></p>
</td>
<td data-celllook="69905">
<p><strong><span data-contrast="auto">What we look for</span></strong><span data-ccp-props="{}"> </span></p>
</td>
</tr>
<tr>
<td data-celllook="4369">
<p><strong><span data-contrast="auto">Cloud and AI security</span></strong><span data-ccp-props="{}"> </span></p>
</td>
<td data-celllook="4369">
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="44" data-aria-level="1"><span data-contrast="auto">7+ years in Cloud Security Engineering, with at least 4 years securing AWS in production, and experience mentoring or technically leading other engineers. </span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="45" data-aria-level="1"><span data-contrast="auto">Experience with Securing AI/ML-enabled services, APIs or MCP-style integrations.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p><span data-ccp-props="{}"> </span></p>
</td>
</tr>
<tr>
<td data-celllook="4369">
<p><strong><span data-contrast="auto">Automation</span></strong><span data-ccp-props="{}"> </span></p>
</td>
<td data-celllook="4369">
<p><span data-contrast="auto">Python or similar, Terraform and CI/CD, with experience using AI tooling to automate security work</span><span data-ccp-props="{}"> </span></p>
</td>
</tr>
<tr>
<td data-celllook="4369">
<p><strong><span data-contrast="auto">Detection & SOC</span></strong><span data-ccp-props="{}"> </span></p>
</td>
<td data-celllook="4369">
<p><span data-contrast="auto">Hands-on SIEM and log analytics, alert tuning, and working with a SOC or MSSP</span><span data-ccp-props="{}"> </span></p>
</td>
</tr>
<tr>
<td data-celllook="4369">
<p><strong><span data-contrast="auto">Endpoint</span></strong><span data-ccp-props="{}"> </span></p>
</td>
<td data-celllook="4369">
<p><span data-contrast="auto">Familiarity with EDR/MDR platforms such as CrowdStrike, including configuration review</span><span data-ccp-props="{}"> </span></p>
</td>
</tr>
<tr>
<td data-celllook="4369">
<p><strong><span data-contrast="auto">Incident response</span></strong><span data-ccp-props="{}"> </span></p>
</td>
<td data-celllook="4369">
<p><span data-contrast="auto">Cloud incident response fundamentals</span><span data-ccp-props="{}"> </span></p>
</td>
</tr>
<tr>
<td data-celllook="4369">
<p><strong><span data-contrast="auto">Environment</span></strong><span data-ccp-props="{}"> </span></p>
</td>
<td data-celllook="4369">
<p><span data-contrast="auto">SaaS or high-growth, data-driven company, working with Platform, Data and IT teams</span><span data-ccp-props="{}"> </span></p>
</td>
</tr>
<tr>
<td data-celllook="4369">
<p><strong><span data-contrast="auto">Compliance context</span></strong><span data-ccp-props="{}"> </span></p>
</td>
<td data-celllook="4369">
<p><span data-contrast="auto">Enough ISO 27001 and SOC 2 familiarity to own evidence for your controls</span><span data-ccp-props="{}"> </span></p>
</td>
</tr>
</tbody>
</table>
<p><span data-ccp-props="{"335559739":60}"> </span></p>
<p> </p>
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Nice to have</span></span></strong><span data-ccp-props="{"134245418":true,"335559738":200,"335559739":80}"> </span></p>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="46" data-aria-level="1"><span data-contrast="auto">Kubernetes/EKS and container security.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="47" data-aria-level="1"><span data-contrast="auto">Threat hunting or purple teaming.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="48" data-aria-level="1"><span data-contrast="auto">Experience with data platform security (pipelines, warehouses, streaming).</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="49" data-aria-level="1"><span data-contrast="auto">Experience with AI-powered engineering tools such as Claude Code, Cursor or GitHub Copilot.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":270,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="50" data-aria-level="1"><span data-contrast="auto">Certifications such as AWS Certified Security – Specialty, GCIH or GCFA.</span><span data-ccp-props="{"335559739":60}"> </span></li>
</ul>
<p> </p><div class="content-conclusion"><h1> </h1>
<h2 data-pm-slice="1 1 []">WHY COGNISM</h2>
<p>At Cognism, we’re not just building a company - we’re building an inclusive community of brilliant, diverse people who <strong>support, challenge, and inspire each other every day</strong>. If you’re looking for a place where your work truly <strong>makes an impact</strong>, you’re in the right spot!</p>
<p>Our values aren’t just words on a page—they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.</p>
<p>Here’s what we stand for:</p>
<p>🤝 <strong>We Own the Outcome Together.</strong><br>🤓 <strong>We Deeply Understand our Customers. </strong><br>🏆 <strong>We Celebrate Impact Wherever It Comes From.</strong></p>
<p>At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you’re unsure if you meet every requirement, we encourage you to apply!</p>
<p> </p></div>