Job Title: Cloud Native Security Engineer

Report To: Head of Security

Job Location: Remote and/or London (right to work in the U.K. required)

Employment Status: Full Time

Salary: Competitive

Who Is ControlPlane?

We are a London based cloud technology company, helping to keep people safe online. We work with cloud providers and their customers to secure the building blocks of the internet, by offering consulting, training and products related to cloud native development, security and operations.

ControlPlane’s priority is to continue to be a leader in the Kubernetes and Cloud DevSecOps space. We secure the next generation of software systems and provide a clear, risk-based adoption guide for organisations looking to implement best practices.

Trusted by Google Cloud, UK Home Office, JPMC, among many others, our clients are world leading organisations.

What We’re Looking For in a Security Engineer

We are looking for security engineers to represent the technical and cultural values of ControlPlane, leading our customers by example in the complex and fast-changing world of cloud native technology. You will perform a mix of client consulting, working on internal labs projects, and contributing to Open Source projects on ControlPlane’s behalf.

There is no perfect candidate for this role. As we look to extend our cloud native security team we welcome engineers and architects with a diverse range of capabilities, experiences and backgrounds.

We are SANS authors (SEC584) and believe strongly in team learning and collaboration. Candidates with an aptitude to learn are preferred, and we provide full training for the newest cloud technologies that our customers rely on.

This is a unique job role within a successful start-up company where you will have the chance to make a positive impact, learn, grow and work with great colleagues who consistently challenge the status quo.

This is a remote position, and when offices reopen we invite you to spend a few days a month in-person at our London office: this is optional and we aim to be entirely flexible to your needs. As a leader in the cloud native community there are opportunities for international travel.

When offices reopen, you may be expected to work on client site for a few days a month.

Roles, Responsibilities and Requirements of Our Cloud Native Security Engineer

Experience or knowledge of some of the below:

  • Experience Threat Modelling and designing Cloud Native Security architectures (AWS, GCP, Azure)
  • Kubernetes and container experience (OpenShift, GKE, and EKS)
  • DevSecOps principles and practices
  • Vault, service mesh, in-toto, and grafeas experience is a plus
  • CI/CD experience, automating security tests and hardening pipelines
  • Knowledge of security tooling
    • from enterprise tools such as Aqua, Twistlock and Prisma
    • to Open Source tools such as falco, kube-hunter, and kube-bench
  • Knowledge and experience using hardening guides, compliance and risk management standards
  • Security related qualifications such as OSCP, Cloud Provider Security certifications, or CISSP
  • A desire to learn, or experience with:
    • Golang or Python
    • Terraform and cloud infrastructure best practices (IaC, regulated systems)


ControlPlane is a dynamic, cutting edge and passionate business for which to work. Our employees are the heart of our business, which means we care about our company culture and our employees’ wellbeing and progression. Alongside this, as our colleague you will have the following benefits:

  • Generous and competitive salary
  • Discretionary team bonus
  • 33 days of paid holiday, including paid leave for the standard 8 UK Bank Holidays
  • Statutory pension contribution
  • Cycle to Work scheme
  • An individual training budget for personal development, including but not limited to:
    • Conferences
    • Training (books, courses, coaching, as well as internal training which is of course included beyond budget)
    • Qualifications
  • Individual development time:
    • 10 days for training
    • 7.5 days to attend and present at conferences
    • 10 days company research and development time

We are looking for technical practitioners who can work with our clients and the team to deliver these projects and help establish ControlPlane as a world-class technical thought leader.

We believe our peers are equally as important as the technology we use. We’re looking for people of the highest personal calibre, quietly confident, with a good work ethic, keenness to learn, emotional maturity and respect, who know that “we” is more than “me”, and who embrace human diversity of all kinds. As we grow you will help us to build a company culture of which we can all be proud. If you espouse these values, we want you!

Please apply via

NOTE FOR RECRUITMENT AGENCIES: Please do not call or email our team speculatively; we do not accept unsolicited CVs. If you wish to partner with us please contact jobs at