Principal Cloud Security Engineer, Trainline
Salary not provided
AWS
Docker
GCP
Terraform
Azure
Git
Senior and Expert level
London
2+ days a week in office
Train ticketing platform
Be an early applicant
Train ticketing platform
1001+ employees
B2CB2BTravelSustainabilityTransporteCommerce
Be an early applicant
Salary not provided
AWS
Docker
GCP
Terraform
Azure
Git
Senior and Expert level
London
2+ days a week in office
1001+ employees
B2CB2BTravelSustainabilityTransporteCommerce
Company mission
We're building the world's no.1 rail platform while empowering greener travel choices, connecting people and places.
Role
Who you are
- AWS Expertise & Cloud Security Experience: Proven experience in implementing and managing robust security controls across AWS environments, with a strong understanding of cloud-native security best practices
- Familiarity with other major cloud platforms such as GCP and Azure is highly desirable
- Experience working with web-based Git repositories (e.g. , GitHub, GitLab) and cloud services such as AWS Lambda, API Gateway, and other serverless architectures to ensure secure configurations and operations
- Strong understanding of cloud security frameworks, such as AWS Well-Architected Framework and CIS Benchmarks
- Cloud & Networking Skills: Solid experience with cloud networking concepts and services, including configuring and securing Virtual Private Clouds (VPCs), Subnets, Security Groups, and Network ACLs
- Expertise in implementing and managing Content Delivery Networks (CDNs), Web Application Firewalls (WAF), and DDoS protection
- Ability to design and enforce security policies that align with best practices for cloud networking and ensure secure application delivery
- Infrastructure & Compliance as Code: In-depth knowledge of Infrastructure as Code (IaC) practices, including the use of tools like Terraform, AWS CloudFormation to automate the provisioning and management of cloud resources
- Strong understanding of Policy as Code frameworks such as OPA or AWS config to enforce security policies and compliance requirements automatically across the infrastructure
- Experience in driving Cloud Security maturity in fast-paced, agile environments, and advocating for security automation and DevSecOps practices to streamline security governance
- Engineering Mindset: A strong engineering mindset with excellent troubleshooting and problem-solving skills to quickly identify security issues and gaps within automated processes
- The ability to implement effective solutions that enhance the overall security posture is essential
- Additionally, the candidate should possess an analytical approach to continuously evaluate and refine automation workflows, security controls, and cloud security policies, identifying areas for improvement and optimizing the security infrastructure
- Any of the following would be beneficial but are not essential: CCSP, AWS Certified Security, AWS Certified DevOps Engineer, AWS Certified Solutions Architect, CompTIA Cloud+
What the job involves
- Join our dynamic team, where we focus on designing, implementing, and monitoring security controls to ensure a robust security posture in a fast-evolving environment
- As part of our mission to continuously improve and mature Trainline's security capabilities, we work in close collaboration with cross functional teams, including Cloud Engineering, SRE, Platform Engineering, and more, to integrate the latest technologies and best practices into our security strategy
- You will play a critical role in safeguarding all digital channels that collectively generate billions of pounds in annual ticket sales, ensuring that our systems remain secure, resilient, and innovative in the face of evolving threats
- Cloud Security Architecture & Design: Lead the design, implementation, and maintenance of robust security frameworks and controls to protect cloud infrastructure across multi-cloud environments (AWS, GCP, Azure). Ensure that security is seamlessly integrated into every layer of the cloud architecture, from network configuration to identity management
- Container & Orchestration Security: Architect and implement secure containerised environments using platforms like Docker, and ECS. Focus on vulnerability mitigation, compliance automation, and secure orchestration practices to ensure container workloads are resilient and meet organisational security requirements
- Security Policy Development & Enforcement: Develop, document, and enforce comprehensive cloud security policies, standards, and procedures that govern cloud infrastructure, services, and containerised workloads. Drive compliance initiatives for security frameworks such as CIS Benchmarks, NIST, and SOC2, ensuring policies are consistently applied across the organization
- Cloud Migration & Native Infrastructure Support: Provide expert guidance and hands on support to teams migrating workloads and applications to cloud-native infrastructure, ensuring security considerations are fully addressed throughout the migration lifecycle. Assist in the adoption of best practices for securing cloud-native architectures (e.g., serverless, microservices, and containerised environments)
- Security Integration into SDLC & CI/CD Pipelines: Collaborate with Development, DevOps, and QA teams to integrate security best practices into the software development lifecycle (SDLC) and CI/CD pipelines. Ensure security is prioritised through automation tools, security testing, and vulnerability scanning as part of the continuous delivery process
- Cross-functional Collaboration on Container Security: Partner with Cloud Engineering, DevOps, and Platform teams to enhance the security of container orchestration platforms (e.g, ECS) and containerised workloads. Proactively identify and mitigate risks related to container security, including configuration management, runtime protection, and image scanning
- Security Assessments & Incident Response: Conduct security assessments, vulnerability scans and risk analyses to identify and address potential security weaknesses within cloud environments. Support the security operations team in incident response efforts related to cloud security incidents, ensuring timely detection, containment, and remediation
- Staying Current on Threat Intelligence & Industry Trends: Continuously research and stay up to date on emerging threats, vulnerabilities, and security trends within cloud infrastructure, container security, and DevSecOps practices. Regularly evaluate new security tools, frameworks, and technologies to enhance the organisation’s cloud security posture
- Security Training & Mentorship: Provide ongoing cloud security training, guidance, and mentorship to engineering and DevOps teams, fostering a security-first culture within the organisation. Ensure that teams are well-equipped to identify, understand, and mitigate cloud security risks and align with established security standards and frameworks
Application process
- Most of our Talent team are currently on leave for the holiday period, so your application is likely to be reviewed in January. Enjoy the break, we’ll get back to you in the new year!
Salary benchmarks
Our take
Trainline make it super easy to book transport tickets. Their app is intuitive and well designed. and they're even pioneering paperless travel, allowing you to store your tickets in the app.
They're hyper focused on customer experience and have a product culture of fast iteration to deliver great outcomes for customers.
Their customers make 170,000 journeys a day and they sell 200 tickets a minute.
They're continuing to innovate to stay ahead. They're using machine learning to predict price movements and are integrating with Siri and Google Assistant so people can buy tickets just by speaking to their phone.
Steph
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
42% female employees
14% employee growth in 12 months
Company
Employee endorsements
Challenging work
"The complex nature of the market as we work with different suppliers is an amazing opportunity to create fluid solutions. A very well segmented..."
Funding (1 round)
Jan 2006
$200.5m
LATE VC
Total funding: $200.5m
Company benefits
- Flexible working (40% min office attendance)
- Cycle to work scheme
- Gym memberships
- Private Health and dental Insurance
- Pension (matched contributions)
- Income Protection
- Share Incentive Plan (buy one get one free)
- Learning budget
- Primary & Secondary Caregiver Leave
- Shared Parental Leave
- Enhanced sick pay
- Free Perkbox subscription
Company values
- Own It - We care about every customer, partner and journey
- Do Good - We make a positive impact
- Travel Together - We're one team
- Think Big - We are building the future of rail
Company HQ
Farringdon, London, UK
Articles
Leadership
Jody Ford
(CEO, not founder)Previously Non-exec Director of Moonpig and Photobox Group.
Milena Nikolic
(Chief Technology Officer, not founder)Previously Engineering Director at Google.
Lisa Hillier
(Chief People Officer, not founder)Previously Chief People Officer at Gousto , The Restaurant Group and Just Eat.
Mike Hyde
(Chief Data Officer, not founder)Previously at Meta.
Dave Price
(Chief Product Officer, not founder)Previously at Spotify and GoEuro.
People progressing
Joined as a Product Manager. Promoted to Product Manager after 1 year. Then promoted again to Principal Product Manager after 7 months and is currently Product Director.
Joined as Business Performance Analyst. Promoted to Senior Analyst after 1.5 years. Then promoted again to Commercial Manager after 7 months.
Diversity, Equity & Inclusion at Trainline
- 💚 Diversity drives us forward We know that having a diverse team is crucial to Trainline’s ongoing success. A team that is diverse in all forms – gender, ethnicity, sexuality, disability, nationality and diversity of thought are key to Trainline being an inclusive environment where every Trainliner can be their true self. We're committed to creating workplaces where everyone belongs, is celebrated and their differences are valued, creating an awesome employee and customer experience. 💚 Meet our Networks Our diversity networks are inclusive communities developed and led by Trainliners, with sponsorship and support from senior leaders. They're all about empowering and supporting underrepresented groups, by providing a safe space to talk, a place to come up with new ideas and a channel for voices to be heard. 🚀 Women in Leadership 💜 Artemis (gender equality) 🏳️🌈 Rainbow Train (LGBTQIA+) 🌻 Sunflower (accessibility) 🌍 Ethnic Diversity Network 🐣 Parent & Carers
Share this job
View 5 more jobs at Trainline