Senior Cloud Security Engineer, Trainline
£90-100k
2+ days a week in office
Europe's leading rail ticketing platform
Open for applications
Europe's leading rail ticketing platform
1001+ employees
Open for applications
£90-100k
2+ days a week in office
1001+ employees
Company mission
Trainline is proud to be Europe's leading rail and coach platform - a tech company with a mission to make train travel as smooth as possible to allow travellers to make greener travel choices.
Role
Who you are
- AWS Expertise & Cloud Security Experience: Proven experience in implementing and managing robust security controls across AWS environments, with a strong understanding of cloud-native security best practices
- Familiarity with other major cloud platforms such as GCP and Azure is highly desirable
- Experience working with web-based Git repositories (e.g. , GitHub, GitLab) and cloud services such as AWS Lambda, API Gateway, and other serverless architectures to ensure secure configurations and operations
- Strong understanding of cloud security frameworks, such as AWS Well-Architected Framework and CIS Benchmarks
- Networking Skills: Solid experience with cloud networking concepts and services, including configuring and securing Virtual Private Clouds (VPCs), Subnets, Security Groups, and Network ACLs
- Expertise in implementing and managing Content Delivery Networks (CDNs), Web Application Firewalls (WAF), and DDoS protection
- Ability to design and enforce security policies that align with best practices for cloud networking and ensure secure application delivery
- Infrastructure & Compliance as Code: Comprehensive knowledge of Infrastructure as Code (IaC) practices, including the use of tools like Terraform or AWS CloudFormation to automate the provisioning and management of cloud resources
- Strong understanding of Policy as Code frameworks such as OPA or AWS config to enforce security policies and compliance requirements automatically across the infrastructure
- Experience in driving Cloud Security maturity in fast-paced, agile environments, and advocating for security automation and DevSecOps practices to streamline security governance
- An Engineering Mindset: Troubleshooting and problem-solving skills to quickly identify security issues and gaps within automated processes
- The ability to implement effective solutions that enhance the overall security posture is essential
- You should possess an analytical approach to continuously evaluate and refine automation workflows, security controls, and cloud security policies, identifying areas for improvement and optimizing the security infrastructure
What the job involves
- Join our dynamic team, where we focus on designing, implementing, and monitoring security controls to ensure a robust security posture in a fast-evolving environment
- As part of our mission to continuously improve and mature Trainline's security capabilities, we work in close collaboration with cross functional teams, including Cloud Engineering, SRE, Platform Engineering, and more, to integrate the latest technologies and best practices into our security strategy
- You will play a critical role in safeguarding all digital channels that collectively generate billions of pounds in annual ticket sales, ensuring that our systems remain secure, resilient, and innovative in the face of evolving threats
- Cloud Security Architecture & Design: Support the design, implementation, and maintenance of robust security frameworks and controls to protect cloud infrastructure in our AWS environment. Ensure that security is seamlessly integrated into every layer of the cloud architecture, from network configuration to identity management
- Container & Orchestration Security: Partner with Cloud Engineering, DevOps, and Platform teams while being a key stakeholder in the architecture and implement secure containerised environments using platforms like Docker, and ECS. Focus on vulnerability mitigation, compliance automation, and secure orchestration practices to ensure container workloads are resilient and meet organisational security requirements
- Security Policy Development & Enforcement: Develop, document, and enforce comprehensive cloud security policies, standards, and procedures that govern cloud infrastructure, services, and containerised workloads. Drive compliance initiatives for security frameworks such as CIS Benchmarks, NIST, and SOC2, ensuring policies are consistently applied across the organization
- Cloud Migration & Native Infrastructure Support: Provide expert guidance and hands on support to teams migrating workloads and applications to cloud-native infrastructure, ensuring security considerations are fully addressed throughout the migration lifecycle. Assist in the adoption of best practices for securing cloud-native architectures
- Security Integration into SDLC & CI/CD Pipelines: Collaborate with Development, Platform, and QA teams to integrate security best practices into the software development lifecycle (SDLC) and CI/CD pipelines. Ensure security is prioritised through automation tools, security testing, and vulnerability scanning as part of the continuous delivery process
- Security Assessments & Incident Response: Conduct security assessments, vulnerability scans and risk analyses to identify and address potential security weaknesses within cloud environments. Support the security operations team in incident response efforts related to cloud security incidents, ensuring timely detection, containment, and remediation
- Staying Current on Threat Intelligence & Industry Trends: Continuously research and stay up to date on emerging threats, vulnerabilities, and security trends within cloud infrastructure, container security, and DevSecOps practices. Regularly evaluate new security tools, frameworks, and technologies to enhance the organisation’s cloud security posture
- Security Training & Mentorship: Provide ongoing cloud security training, guidance, and mentorship to Engineering and Platform teams, fostering a security-first culture within the organisation. Ensure that teams are well-equipped to identify, understand, and mitigate cloud security risks and align with established security standards and frameworks
Salary benchmarks
Our take
Trainline make it super easy to book transport tickets. Its app is intuitive and well designed and its even pioneering paperless travel, allowing users to store their tickets in the app.
Its hyper focused on customer experience and has a product culture of fast iteration to deliver great outcomes for customers.
Its customers make 170,000 journeys a day and it sell 200 tickets a minute.
Its continuing to innovate to stay ahead, using machine learning to predict price movements and integrating with Siri and Google Assistant so people can buy tickets just by speaking to their phone.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Employee endorsements
Challenging work
"The complex nature of the market as we work with different suppliers is an amazing opportunity to create fluid solutions. A very well segmented..."
Company benefits
- Flexible working (40% min office attendance)
- Cycle to work scheme
- Discounted gym memberships through Wellhub
- Private Health and Dental Insurance
- Enhanced Pension (matched contributions)
- Income Protection
- Share Incentive Plan (buy one get one free)
- Learning budget
- Primary & Secondary Caregiver Leave
- Shared Parental Leave
- Enhanced sick pay
- Free Perkbox subscription
- Electric Vehicle Salary Sacrifice Scheme
- YellowNest - Subsidised Childcare Fees
- Work from Abroad
Company values
- Own It - We care about every customer, partner and journey
- Do Good - We make a positive impact
- Travel Together - We're one team
- Think Big - We are building the future of rail
Company HQ
Farringdon, London, UK
Articles
Leadership
Jody Ford
(CEO)Joined Trainline in 2020 as COO before becoming the CEO in 2021. Previously the Group CEO at Moonpig and Photobox and also spent over 10 years at eBay in various VP roles.
Lisa Hillier
(CPO)Previously the CPO at Gousto, The Restaurant Group, and Just Eat. They also spent over 6 years at Betfair as the Head of HR and Chief Human Resource Officer.
Mike Hyde
(Chief Data Officer)Previously a Director of Data Science at Facebook and as a Director of Business Insights at Skype and Microsoft.
Sakshi Anand
(CGO)Joined Trainline in 2023 as the VP of Growth and President of UK before becoming the CGO in 2025. They are also the Founder of NeuStar Consulting.
People progressing
Gary joined in 2022 from Comparethemarket as Director of Engineering and was recently promoted to VP Engineering, reporting directly to CTO.
Joe joined in 2022 from Meta as Director of Data Science and was recently promoted to VP Data, reporting directly to CTO.
Ali joined in 2023 from Meta and was recently promoted to VP Product, reporting directly to CPO.
Diversity, Equity & Inclusion at Trainline
- 💚 Diversity drives us forward We know that having a diverse team is crucial to Trainline’s ongoing success. A team that is diverse in all forms – gender, ethnicity, sexuality, disability, nationality and diversity of thought are key to Trainline being an inclusive environment where every Trainliner can be their true self. We're committed to creating workplaces where everyone belongs, is celebrated and their differences are valued, creating an awesome employee and customer experience. 💚 Meet our Networks Our diversity networks are inclusive communities developed and led by Trainliners, with sponsorship and support from senior leaders. They're all about empowering and supporting underrepresented groups, by providing a safe space to talk, a place to come up with new ideas and a channel for voices to be heard. 🚀 Women in Leadership 💜 Gender Equality Network 🏳️🌈 Rainbow Train (LGBTQIA+) 🌻 Sunflower (accessibility) 🌍 Ethnic Diversity Network 🐣 Parent & Carers
Share this job
View 14 more jobs at Trainline