Senior Security Engineer

About the role

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in Netherlands.

In this role, you will play a key part in protecting a real-time, cloud-based fraud prevention platform serving customers across highly regulated industries worldwide. You will combine hands-on cloud and infrastructure security engineering with ownership of security assurance and compliance programmes. Working across AWS, Kubernetes, Terraform, and GitHub environments, you will strengthen identity management, automate security controls, and improve threat detection and incident response capabilities. You will also lead major certification and compliance initiatives, including ISO 27001, ISO 42001, SOC 2, and PCI DSS. A key focus will be building an engineering-driven security programme where evidence collection, access reviews, and compliance workflows are automated. This is an opportunity to shape security strategy, influence technical decisions, and contribute to a fast-growing international technology environment.

Accountabilities -

Security Automation and Compliance Engineering: Design and implement automated evidence collection pipelines across AWS, GitHub, CI/CD systems, and identity management tools. Select and manage compliance automation solutions, ensuring security controls are continuously verified through code rather than manual processes.

-

Identity and Access Management: Automate access reviews across AWS IAM, Google Workspace, GitHub, and essential SaaS applications. Develop self-service access request workflows in collaboration with Platform and IT teams, while strengthening identity governance for employees, workloads, and AI agents.

-

Cloud and Infrastructure Security: Identify and remediate IAM weaknesses, including unused roles, excessive permissions, long-lived credentials, and privileged root or emergency access. Promote short-lived, appropriately scoped identities with clear ownership.

-

Infrastructure Security Guardrails: Develop and maintain Terraform and CI/CD security controls, including secrets scanning, policy validation, signed container images, and standardized security baselines for cloud accounts and Kubernetes clusters.

-

Threat Detection and Incident Response: Participate in on-call and security incident triage rotations. Investigate alerts generated by AWS GuardDuty, Security Hub, WAF, and Kubernetes, manage vulnerability and bug bounty reports, and coordinate incident containment and resolution.

-

Detection Engineering: Develop and continuously improve security detections using CloudTrail, GuardDuty, WAF, and Kubernetes telemetry. Contribute to cross-signal correlation capabilities and AI-assisted security alert triage.

-

Security Reviews and Risk Assessment: Validate penetration testing findings and vulnerability remediation activities, review infrastructure and IAM changes, and contribute to threat modelling for new services and AI-related features.