Infrastructure Security Engineer - London

Xai
Dublin +1 more
On-site

Who this role is best for

Aimed at mid-to-senior level infrastructure security professionals who can operate in multi-cloud environments and thrive in a flat, hands-on team structure.

Best fit for

  • Candidates with 3–5 years of cloud security experience and a track record in hybrid environments
    — “3–5 years of experience in cloud security, infrastructure security, or related roles”
  • Individuals who can integrate security into CI/CD pipelines and build secure IaC templates
    — “Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls”
  • Professionals with a strong background in cloud security tools like CSPM, CWPP, and CASB
    — “Implement and manage cloud security tools and services (e.g., CSPM, CWPP, CASB)”
  • Those who have experience securing AI/ML workloads and are interested in AI-driven security monitoring
    — “Interest in leveraging AI for cloud security monitoring and automation”

Things to consider

  • The role demands a strong grasp of compliance frameworks like GDPR and NIST CSF
    — “Monitor and remediate infrastructure to comply with regulations and best practices”
  • Candidates must be located in the EU/UK or willing to relocate, which is a key constraint
    — “Located in the EU/UK or willing to relocate”

How to stand out

  • Highlight experience in securing containerized applications and Kubernetes environments
    — “Maintain Kubernetes security aligned with current best practices”
  • Demonstrate hands-on skills in building and maintaining cloud security policies and procedures
    — “Develop and maintain cloud security policies, standards, and procedures”
  • Showcase projects involving automation with Python, Terraform, or configuration management tools
    — “Build, deploy, and maintain security operations infrastructure using Python, Terraform”
  • Emphasize contributions to open-source cloud security projects or custom tool development
    — “Contributions to open-source cloud security projects”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • design and implement secure cloud architectures
  • build and secure mission-critical applications
  • monitor and respond to security events
  • develop and maintain cloud security policies
Typical background
3-5 years of experience in cloud security or infrastructure security

Skills & requirements

Required

Cloud SecurityInfrastructure SecuritySecurity AutomationCloud-native Application SecuritySecurity ComplianceInfrastructure As CodeContainer SecurityCi/cd Pipeline SecuritySecurity OperationsSecurity Threat Management

Preferred

PythonTerraformPuppet

About the role

Original posting from Xai via Greenhouse

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.

ABOUT THE ROLE:

We are seeking a talented and motivated Infrastructure Security Engineer to join our security team. In this role, you will design, implement, and maintain secure cloud and hybrid infrastructure, and ensure the integrity of our cloud-native applications.

This role focuses on securing critical infrastructure across multi-cloud and hybrid environments, with work that may span platforms such as SpaceXAI, X Social, X Money and related systems. You’ll operate with an automation-first mindset: building secure foundations, hardening platforms at scale, and partnering closely with engineering teams so security is embedded in how we build and run systems—not bolted on after the fact.

RESPONSIBILITIES:

Cloud & infrastructure security

Design and implement secure cloud architectures across multiple cloud platforms (e.g., AWS, GCP, Azure)

Build and secure mission-critical applications in hybrid cloud and on-premises environments

Develop and maintain Infrastructure as Code (IaC) templates with embedded security controls

Assist with regular security assessments and audits of cloud infrastructure and services

Implement and manage cloud security tools and services (e.g., CSPM, CWPP, CASB)

Manage identities and roles effectively across cloud and hybrid environments

Monitor and remediate infrastructure to comply with regulations and best practices (e.g., PCI, NIST CSF, GDPR, HIPAA)

Platform, containers & developer enablement

Design and implement secure container standards and automation that enable frictionless developer workflows

Maintain Kubernetes security aligned with current best practices

Collaborate with development teams to ensure security best practices are integrated into CI/CD pipelines

Secure and enhance CI/CD pipelines; integrate and maintain code scanning platforms

Detection, operations & tooling

Monitor and respond to security events and incidents in cloud and hybrid environments

Maintain SIEM data pipelines needed for reliable alerting

Build, deploy, and maintain security operations infrastructure using Python, Terraform, and configuration management (e.g., Puppet)

Develop dashboards and alerts from security metrics

Develop and maintain cloud security policies, standards, and procedures

Own security projects end to end: identify issues and implement solutions

Stay current with emerging cloud security threats and mitigation strategies

BASIC QUALIFICATIONS:

Bachelor's degree in Computer Science, Cybersecurity, or a related field

3–5 years of experience in cloud security, infrastructure security, or related roles

Strong understanding of cloud security principles, compliance frameworks, and best practices

Proficiency in at least one cloud platform (AWS, GCP, or Azure) and associated security services

Proven experience securing hybrid AWS/on-premises (or multi-cloud) environments, including IAM and overall security posture

Experience with Infrastructure as Code tools (e.g., Terraform, CloudFormation)

Familiarity with containerization technologies and their security implications

Knowledge of network security concepts and protocols

Experience with scripting languages (e.g., Python, Bash) for automation and tool development

Proactive mindset with strong ownership, critical thinking, and problem-solving skills

Located in the EU/UK or willing to relocate

PREFERRED SKILLS AND EXPERIENCE:

Relevant security certifications (e.g., CCSP, CSSK, AWS Security Specialty)

Deep expertise in Kubernetes and container security

Experience with multi-cloud environments and cloud-to-cloud security

Knowledge of CI/CD best practices and tools

Familiarity with regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS, NIST CSF)

Strong proficiency with Python, Terraform, and configuration management (e.g., Puppet)

Hands-on experience building GitHub Actions and workflows

Experience with observability and security operations tooling (e.g., Prometheus, Grafana, CloudWatch, Karma; SIEM platforms such as Wazuh)

Experience in building custom cloud security tools or integrations

Interest in leveraging AI for cloud security monitoring and automation

Contributions to open-source cloud security projects

Experience with securing AI/ML workloads in cloud environments

Experience in banking, money transmission, P2P payments, or similarly regulated financial platforms.

SpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Source: Xai careers (Greenhouse)

Similar roles