[Hiring] Cloud Native Security Engineer @ControlPlane

Role Description

We are looking for Cloud Native Security consultants to represent the technical and cultural values of ControlPlane, leading our customers by example in the complex and fast-changing world of cloud native technology. You will perform a mix of client consulting, working on internal labs projects, and contributing to Open Source projects on ControlPlane’s behalf.

There is no perfect candidate for this role. As we look to extend our cloud native security team we welcome engineers and architects with a diverse range of capabilities, experiences and backgrounds.

This is a unique job role within a successful start-up company where you will have the chance to make a positive impact, learn, grow and work with great colleagues who consistently challenge the status quo.

Qualifications

• Knowledge of Threat Modelling and Cloud Native Security architectures (AWS, GCP, Azure)
• Kubernetes and container experience (some of EKS, GKE, AKS, OpenShift, and container runtimes)
• Knowledge of software supply chain security
• DevSecOps principles and Engineering practices
• CI/CD experience, automating security tests, and hardening pipelines
• Knowledge of security tooling from enterprise tools such as Aqua, Prisma, Sysdig, Lacework, etc to Open Source tools such as falco, kube-hunter, and kube-bench.
• Knowledge and experience using hardening guides, compliance and risk management standards
• A desire to learn, or experience with:
• CLI tooling in any of the above technologies.
• Golang or Python
• Terraform and cloud infrastructure best practices (IaC, regulated systems)

Requirements

• Strong work ethic and keenness to learn
• Emotional maturity and respect for others
• Ability to embrace human diversity of all kinds

Benefits

• Generous and competitive salary
• Bonus
• 33 days of paid holiday, including paid leave for the standard 8 UK Bank Holidays
• Enhanced Parental Leave
• Private Medical insurance
• An individual training budget for personal development, including but not limited to:
• Conferences
• Training (books, courses, coaching, as well as internal training which is of course included beyond budget)

Company Description

ControlPlane is a London headquartered consultancy specialising in cloud-native, Kubernetes, and open source solutions. Our expertise lies in helping organisations adopt and secure complex cloud infrastructures by implementing security measures that are "secure-by-design" and "secure-by-default." This engineering excellence has driven ControlPlane deeper into cybersecurity providing services like threat modelling, penetration testing, and supply chain security to ensure robust protection against cyberattacks in containerised and cloud-native environments.

We are acclaimed for our contributions to securing highly regulated industries, such as finance, healthcare, and national infrastructure. We help businesses improve their security posture through services like DevSecOps consulting, zero-trust architectures, and platform engineering. ControlPlane also focuses on advancing best practices in the Kubernetes ecosystem, offering specialised training and community engagement.

Our clients range from multinational banks to tech giants and public clouds, where we assist with both security and operational needs. In addition to consulting, we are active in the open source community, supporting projects like Flux CD and providing security tools for Kubernetes environments.

Over the coming years you’ll see us retain our focus on solving difficult problems for clients with intense security controls using pragmatic, real world solutions.