Cloud & Information Security Engineer at EC Markets LTD

Belgrade, Central Serbia, Serbia -

Full Time

Start Date

Immediate

Expiry Date

14 Jun, 26

Salary

0.0

Posted On

16 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cloud Engineering, Information Security, AWS, Security Monitoring, Logging, Vulnerability Management, Identity And Access Controls, Least Privilege, MFA, Infrastructure As Code, Configuration Management, Automation, CI/CD Pipelines, Penetration Testing, Incident Response, FCA Reviews

Industry

Financial Services

Description

Cloud & Information Security Engineer Job Purpose The Senior Cloud & Information Security Engineer owns EC Markets’ technical security posture and cloud infrastructure. This role is responsible for designing, implementing, and operating secure systems while supporting regulatory compliance. Key Responsibilities Information Security Ownership Own day-to-day information security controls and technical safeguards. Implement and maintain security monitoring, logging, vulnerability management, and hardening. Manage identity and access controls from a technical enforcement perspective (least privilege, MFA, segregation). Cloud & Infrastructure Engineering Design, build, and maintain cloud infrastructure (AWS), including network setup, with security-by-design principles. Own infrastructure-as-code, configuration management, and automation. Ensure secure networking, backups, encryption, and resilience of cloud services. DevOps & Secure Engineering Support CI/CD pipelines, release processes, and secure change management. Embed security into development and deployment workflows. Maintain version control, environment separation, and technical auditability. Security Testing & Technical Assurance Lead technical aspects of penetration testing, vulnerability scans, and remediation. Support vendor selection and coordination for external security testing and specialist reviews. Translate findings into concrete technical fixes. Incident Response (Technical Lead) Act as technical lead during security incidents. Support forensic investigation, containment, and recovery. Contribute to post-incident reviews and control improvements. Regulatory Support (Technical) Provide technical evidence and explanations to support audits and FCA reviews. Work closely with the IT Manager and Compliance on demonstrating effective controls. Skills & Experience Degree in Computer Science, Data Engineering, or related field. 5-8 years of hands-on experience in cloud engineering and information security. Excellent understanding of networking in on-premises and cloud. Knowledge of security frameworks (ISO 27001, NIST) applied in practice. Experience with DevOps tooling, automation, and secure system design. Certifications such as CISSP, CISM, CCSP, or cloud security certifications are desirable. Location London, London, City of (Hybrid) Department IT Employment Type Full-Time Minimum Experience Experienced

Responsibilities

This role is responsible for owning the technical security posture and cloud infrastructure, focusing on designing, implementing, and operating secure systems to support regulatory compliance. Key duties include managing information security controls, implementing security monitoring, and engineering secure cloud infrastructure using security-by-design principles.