Soc validation engineer Work, Jobs (with Salaries)

Senior Principal, Cloud Engineering
Forterro —Remote
- Hybrid work
- AWS
Quick apply
2d
AI SoC Validation / Bring-up Lead
Graphcore —Bristol
- Software troubleshooting
- Engineering
- Master's degree
- Annual leave
- Employee assistance programme
Staff SoC Architect
Graphcore —Bristol
- Computer Science
- Engineering
- Machine learning
- Annual leave
Senior SoC Architect
Graphcore —Bristol
- Computer Science
- Engineering
- Machine learning
- Annual leave

More jobs to discover

Find similar jobs that you might be interested in.

IXI Platform Delivery Lead
IXICO —London
Familiarity with SOC 2 and SOC 3 frameworks and the practical controls needed to support secure, compliant platform delivery.
Tech Director, Post Silicon Validation
Graphcore —Bristol
In addition to a competitive salary, Graphcore offers flexible working, a generous annual leave policy, private medical insurance and health cash plan, a dental…

I want to receive the latest job alerts for soc validation engineer

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

soc validation engineer jobs near

Cloud Engineer jobs in Remote

Shift Leader jobs in Bristol

Cloud Engineer jobs in Newcastle Upon Tyne

Cloud Engineer jobs in Warrington

Cloud Engineer jobs in Hove

Cloud Engineer jobs in Exeter

Security Architect jobs in London

Hardware Architect jobs in Cambridge

Restoration Hardware jobs in London

Architect Property Developer jobs in London

Night Shift Warehouse jobs in Rotherham

Shift Leader jobs in Belfast

Afternoon Shift jobs in London

Night Shift jobs in Lowestoft

Night Shift Warehouse jobs in Romford

Shift Leader jobs in Hemel Hempstead

Shift Leader jobs in Crawley

Shift Leader jobs in Middleton

Senior Principal, Cloud Engineering

Forterro -
Remote

Quick apply

Job details

Permanent
2 days ago

Qualifications

Scripting and automation in system administration
Cloud infrastructure
Dashboard visualisation
Zero Trust Architecture (Architecture security)
Kubernetes
Ansible
Stakeholder liaison
CISSP
Software development operations experience
AWS
Incident response
CI/CD pipelines
NIST standards
Terraform
Operational security implementation
Risk management
GIAC Certification
Cyber security risk management
DevOps implementation
GitLab
PowerShell scripting
Infrastructure provisioning automation
PowerShell
Terraform provisioning
Network Security

Full job description

Description

Forterro is seeking a Senior DevSecOps Engineer to close the operational gap between Security tooling requirements, Platform automation and CloudOps execution across a multi-product AWS SaaS estate. This is a hands-on engineering role responsible for making security controls deployable, repeatable, measurable and operationally reliable.
The role is a dedicated for Security function but embedded within the Cloud Platform / Platform Engineering team so that it has the practical authority to implement controls through infrastructure-as-code, GitOps workflows, CI/CD pipelines and operational runbooks. Security will define risk, policy and control intent; Platform will provide automation patterns; CloudOps will maintain and patch operational systems; this role owns the bridge between those teams and ensures security tooling and configuration are successfully implemented and handed over.
You will take hands-on ownership of cloud workload protection, vulnerability and patch management automation, network perimeter controls, container and serverless security, and deployment health for security tooling such as CrowdStrike, Tenable, ManageEngine, Fortinet, Cloudflare and AWS-native security services. The role must close the gap by turning security requirements into working automation, verified configuration and clear operational acceptance criteria.

Responsibilities

Design, implement and maintain AWS security controls across IAM, networking, encryption, logging, account governance and guardrails.
Implement and maintain AWS-native security services and governance patterns, including AWS Organizations, Control Tower, Service Control Policies, IAM Access Analyzer, Security Hub, GuardDuty, Inspector, Config, CloudTrail, KMS and centralised logging where applicable.
Harden AWS accounts, services and workloads against CIS Benchmarks and Forterro security baselines, including documented exception and waiver processes for product-specific differences.
Translate security requirements into infrastructure-as-code, policy-as-code and reusable automation modules that can be deployed consistently across multiple products and environments.

Own the reliable deployment, configuration and operational health of security tooling across cloud and workload environments.
Ensure CrowdStrike Falcon endpoint and cloud workload protection is deployed, healthy, version-compliant and reporting correctly, including failed agent deployment remediation and coverage reporting.
Ensure Tenable scanning coverage is complete and reliable across cloud assets, with remediation workflows, exception handling and evidence reporting agreed with the Security team.
Operate and improve ManageEngine-based patch tooling and workflows, ensuring patch automation, compliance reporting, failure handling and maintenance windows are clear and repeatable.
Troubleshoot failed security-tool deployments and configuration drift across IAM, networking, Kubernetes, host agents, APIs, CI/CD and platform automation.

Operationalise vulnerability and patch management processes across the AWS estate, ensuring scan coverage, triage, remediation ownership and closure tracking are measurable.
Define, automate and report patch SLAs based on severity, asset criticality and business impact, including exception handling, rollback evidence and stakeholder communication.
Work with Security to prioritise risk and with CloudOps/Product teams to execute remediation safely through approved change-control processes.
Create dashboards and reports for patch compliance, vulnerability ageing, failed deployments, risk acceptance and remediation trends.

Implement, maintain and audit Fortinet firewall controls, including rule sets, segmentation, VPNs, policy reviews and configuration validation under change control.
Manage and validate Cloudflare services including WAF, DNS, CDN, DDoS protection and Zero Trust / access policies, using configuration-as-code where practical.
Partner with Security on policy intent while ensuring configuration is implemented accurately, tested and operationally supportable.

Secure and harden Kubernetes clusters, including Amazon EKS, RBAC, network policies, admission controls, secrets management, runtime controls and image provenance.
Integrate container image scanning, registry scanning, software composition analysis, secrets scanning and SBOM generation into CI/CD and runtime processes.
Establish and enforce baseline configurations and CIS Kubernetes Benchmark compliance using policy-as-code tooling such as OPA/Gatekeeper or Kyverno where appropriate.
Secure AWS Lambda and event-driven serverless services through least-privilege execution roles, dependency and code scanning, runtime monitoring, event-source control and API Gateway/WAF guardrails.

Implement and maintain infrastructure-as-code and automation using Terraform, Crossplane, CloudFormation where required, Ansible, Helm, Python, Bash/PowerShell and YAML.
Integrate security controls into GitLab CI/CD and GitOps workflows such as ArgoCD, including SAST, SCA, secrets scanning, IaC scanning, container scanning, policy gates and exception workflows.
Automate routine security operations including scanning, patch orchestration, configuration drift detection, evidence gathering and compliance reporting.
Convert repeatable runbooks into idempotent automation and reusable deployment patterns that CloudOps and product teams can consume safely.

Create clear runbooks, operational acceptance criteria, handover packs, service documentation, diagrams and support guidance for CloudOps and product teams.
Define and maintain a practical RACI for security tooling deployment and operation, reducing ambiguity between Security, Platform, CloudOps and product teams.
Participate in incident response and post-incident reviews where security tooling, control failures, vulnerability exposure or patch failures are involved.
Mentor engineers on secure practices and support continuous improvement across Platform Engineering, CloudOps and product delivery teams.
Evaluate new security technologies and products, produce evaluation reports, and recommend improvements aligned to business risk and SaaS platform strategy.

Skills, Knowledge & Expertise

5+ years of hands-on experience in DevSecOps, Cloud Security Engineering, Platform Engineering, SRE or senior cloud engineering roles.
Strong working knowledge of AWS security architecture and services, including IAM, networking, encryption, logging, Organizations/SCPs, Security Hub, GuardDuty, Inspector, Config, CloudTrail and KMS.
Practical experience deploying, configuring or operating security tools such as CrowdStrike, Tenable, ManageEngine, Fortinet firewalls and Cloudflare.
Strong experience with infrastructure-as-code, GitOps and CI/CD tooling such as Terraform, CloudFormation, Ansible, Helm, ArgoCD, GitLab CI/CD and Git.
Proficiency with scripting and automation using Python, Bash, PowerShell and YAML.
Experience securing Kubernetes/EKS, container platforms and serverless workloads, including RBAC, network policies, admission controls, image scanning, secrets management and runtime monitoring.
Solid grasp of vulnerability management, patch management, risk-based remediation, change control, SLAs and compliance evidence.
Hands-on ability to troubleshoot failed automation, configuration drift and deployment failures across cloud, network, endpoint, Kubernetes and CI/CD layers.
Experience operating in a multi-team, multi-product SaaS or enterprise cloud environment.
Excellent communication, stakeholder management and ownership mindset, with the ability to reduce ambiguity between Security, Platform, CloudOps and product teams.

Relevant certifications such as AWS Certified Security - Specialty, Certified Kubernetes Security Specialist (CKS), CISSP, CCSP, GIAC, Terraform Associate or equivalent experience.
Experience with SIEM/SOAR platforms, security incident response and threat-informed remediation.
Familiarity with compliance frameworks such as ISO 27001, SOC 2, NIST and CIS.
Experience implementing policy-as-code
Experience in SaaS platform standardisation, shared services, mergers/acquisitions integration or multi-account AWS governance.

About Forterro

Founded in 2012, Forterro has grown to become a category leader in industrial software – with strongholds in Europe’s top production economies, as well as regional service hubs and development centres around the world. From more than 40 office locations, our 2,500+ employees provide and support software for more than 13,000 industrial businesses. Our products are deeply rooted in the demands of their local geography. And each is designed to strengthen and accelerate our customers’ ability to operate efficiently and compete effectively.

Quick apply

Refine Your Search

soc validation engineer jobs

Senior Principal, Cloud Engineering

AI SoC Validation / Bring-up Lead

Staff SoC Architect

Senior SoC Architect

More jobs to discover

I want to receive the latest job alerts for soc validation engineer

Explore jobs in more locations

Description

Responsibilities

Skills, Knowledge & Expertise

About Forterro

Jobseeker tools

Employer Tools

Browse

Stay Connected