Senior Cloud Security Engineer (London or Bristol) Full Time NEW

We are HealthHero, Europe’s largest digital clinic. Join us at a pivotal moment as we scale our digital healthcare platform across Europe — giving you the chance to shape security at the heart of a fast-growing, AI-driven business. We are recruiting an exciting Senior Cloud Security Engineer on an initial 12 month fixed term contract, with a view to becoming permanent – based in either our London or Bristol office two days per week.About The RoleThis role will form a fundamental part of a growing PlatformSecurity function, where the team covers application security, cloud security, security operations, culture and risk management. As a tech-centric organisation the Information Security team will play a critical part in embedding a security-first mindset into application development and continuous application monitoring. This role will co-own the cloud security posture and tooling across HealthHero’s AWS and Azure estates and have the opportunity to tackle cloud security with an international scope. The role will be supported by a multidisciplinary force of Infrastructure, Data Governance and Engineering team leads with a security focus as part of their remit. The role has a focus on infrastructure and cloud networking when it comes to security posture.As an experienced Cloud Security Engineer, your working day will include but not be limited to:DevSecOps & SDLCChampion integration of security testing into CI/CD pipelines across all development teams and usage of automated security gates: SAST, DAST, dependency scanning, secrets detectionEnable self-serve security tooling for development teamsAbility to set up development environmentCloud SecurityOwn cloud security posture management using Wiz (or similar CSPM) Define and enforce cloud security baselines, guardrails, and policies in AWS Implement and maintain IaC security scanning for Terraform Manage IAM policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detectionEstablish logging, monitoring, and alerting requirements based on threat modellingInvestigate and respond to cloud security eventsRisk & ComplianceIdentify, articulate, and escalate security risks to senior leadership with mitigation plansTrack and remediate vulnerabilities across infrastructure Manage customer initiatives related to due diligence when required toSupport and develop annual programme of Penetration Testing and associated remediationsStakeholder EngagementPartner with internal and stakeholder management to support any requirements from the security function – particularly governance and accreditation requirements across different countriesProvide expertise on emerging threats and vulnerabilitiesSupport response to customer/client due diligence requests with timely and accurate information regarding vulnerability exposureEssentialKey Skills and ExperienceProven experience in application security, DevSecOps, or cloud securityStrong understanding of cloud networkingExperience securing cloud environments (AWS, Azure)Ability to read and write IAC (Terraform) code, comfortable with IAC lifecyclesFamiliarity with container security and KubernetesUnderstanding of secure coding, penetration testing techniques, SIEM, and vulnerability managementStrong technical skills relevant to Information Security such as secure coding standards, ethical hacking techniques, network security and risk analysis Understanding of managing Secure Development Lifecycle and Vulnerability ManagementUnderstanding and practical experience of ISO27001:2022 controls and audit processesDesirableAWS Security Specialty or similar certificationExperience in regulated environments (healthcare, financial services)Familiarity with NHS DSPT Technical knowledge of GDPR and data protection requirementsHands-on with CI/CD security tooling and pipeline integrationInterest in learning other countries health and security regulations (France / UK / IR / DE)About UsWe exist to simplify healthcare and improve lives by making care feel instant, intelligent and human.HealthHero is Europe’s largest digital health provider, delivering 4 million consultations per year. But we’re just getting started. We’ve built a seamless digital clinic that brings body and mind together — from GP appointments and mental health support to long-term condition management. By sitting behind the world’s leading insurers and employers and supporting public health systems, we make it easier for millions of people to get the care they need, exactly when they need it.We are a high-growth, capital-backed business with a sophisticated scale strategy. Our team is a unique blend of digital-native pioneers, management consultants, creatives and industry-leading clinical experts.We aren’t just digitising appointments; we’re building the next generation of healthcare. We’re creating an AI-powered, always-on ecosystem that learns from every interaction to shift the needle from reactive treatment to proactive, sustainable health. At HealthHero, we are digital when it should be and human where it counts.Join us, and help build a next generation health system the world is waiting for.We’re proud to be recognised as a Great Place to Work, which reflects our commitment to creating a supportive and engaging culture. We have also been featured as the fastest growing digital healthcare company of scale in the first Sunday Times 100 Tech list. This recognition shows our impact in the digital health sector and our dedication to innovation and excellence. Committed to achieving excellence in the delivery of person-centred care, we invest in people, resources and technology to continuously improve the quality of its services and organisational culture.Why us?Our values guide us, every day we strive to Simplify, Own, Aspire and Respect (SOAR) -and we’re rewarded when we do.What We OfferA full induction training programme, which will be undertaken via Microsoft TeamsAn opportunity to work as part of an experienced team who are passionate in their field, supportive, diverse and dynamic25 days leaveBank Holidays and your birthday off as leaveRegular 1-2-1s with your line Manager24/7 on-call staff supportAuto-enrolment pension schemeHealth Scheme and access to our Employee Assistance ProgrammeLife Insurance SchemeApplyIf you are interested in making a difference and believe this role is a good fit for you, we would love to hear from you. If you have any questions, please contact our Recruitment Team at recruitment-team@healthhero.comHybrid: London or BristolClosing date for applications: Friday 29 May (5pm)Additional InformationWe reserve the right to close this job in the event we receive a sufficient number of applicationsPlease note that we are unfortunately unable to offer a sponsor licence to candidates who require sponsorship from their employerEquality, Inclusivity and DiversityIn line with our commitment to Equality, Inclusivity and Diversity, we welcome and encourage applications from all suitably qualified candidates from all backgrounds. We are committed to supporting and promoting equality and diversity and aim to establish an inclusive working environment. As such, we welcome diverse applications from candidates irrespective of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race (including colour, nationality, ethnic and national origin), religion or belief, sex, or sexual orientation.We are a certified Disability Confident Employer and is committed to affording equal opportunities for candidates with disabilities or special needs. Should you require any reasonable adjustments to be made at any part of your application process, please let us know by contacting us at recruitment-team@healthhero.comSafeguardingPlease see here for information relating to our commitment to safeguarding.