Senior Security Engineer - Developer Experience

Motorway
London, United Kingdom
Hybrid

Who this role is best for

Geared toward platform-focused engineers comfortable with embedding security into CI/CD pipelines, working in London as part of a fast-growing tech team.

Best fit for

  • Candidates with experience in building secure-by-default infrastructure and tooling for product teams
    — “ensure that security is built into how engineers build, deploy, and operate software”
  • Individuals who have worked with containers, serverless, and Infrastructure as Code
    — “Proven experience working with Containers and serverless with Infrastructure as code”
  • Professionals skilled in translating security policies into enforceable platform guardrails
    — “Help translate security policies and standards into practical, enforceable platform patterns and guardrails”

Things to consider

  • The role requires consistent in-office presence in London for at least 2 days a week.
    — “2 days a week in our London office, with socials and snacks galore”
  • Candidates must be ready to work with a virtual SOC and support incident response.
    — “Work as part of a virtual SOC with the Security Operations Team to support in security incident response”

How to stand out

  • Highlight your experience with secure-by-default platform design and automation of security checks
    — “Design, implement, and maintain secure-by-default platform capabilities”
  • Emphasize your ability to reduce manual security toil through automation and tooling
    — “Reduce manual work (toil) for the technology and Security Operations Team using automation”
  • Showcase your knowledge of security frameworks like ISO27001 and NIST CSF
    — “Knowledge of security standards and frameworks (e.g. ISO27001, NIST CSF, AWS FSBP) is beneficial”
  • Demonstrate your ability to collaborate with engineering teams on secure CI/CD integration
    — “Collaborate with engineering to embed secure software development practices into CI/CD pipelines”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Design and implement secure-by-default platform capabilities
  • Build automated security checks and guardrails
  • Embed secure software development practices into CI/CD pipelines
Typical background
Proven experience as a Platform engineer or Developer Experience engineerExperience working with Containers and serverless with Infrastructure as codeGood knowledge of AWS cloud security best practices and tooling

Skills & requirements

Required

Platform EngineeringDeveloper ExperienceCloud SecurityInfrastructure As CodeAWSContainer ManagementServerless

Preferred

Automated Security ChecksObservabilityReliabilitySecurity Incident Response

Stack & domain

Platform EngineerDeveloper Experience EngineerContainersServerlessInfrastructure As CodeAWS Cloud Security Best PracticesNetworksSystemsWeb Applications

About the role

Original posting from Motorway via Ashby

ABOUT MOTORWAY

Motorway is the UK's largest online car-selling platform. We connect private sellers directly with over 8,000 dealers nationwide. Our online platform helps sellers achieve great prices for their cars while giving dealers fast, reliable access to the stock they want for their dealerships. Founded in 2017, our award-winning, technology-led approach has redefined the experience of selling a car. Motorway is backed by some of the world’s leading technology investors, having raised £143 million in Series C funding.

This is a unique opportunity to join a fast-growing scale-up at a crucial phase of growth and help change an industry for the better.

About the role

Motorway is rapidly growing its technology team and business, and we are looking for a Developer Experience Security Engineer to help enable a secure, scalable, and frictionless developer experience across Motorway.. We have recently built and rolled out a new container platform on top of AWS Fargate, and are currently enhancing our observability, reliability, and developer-focused tooling. We will continue to build and evolve secure, standardised platform capabilities that reduce cognitive load and help teams ship faster with confidence.

As a Developer Experience Security Engineer, you will ensure that security is built into how engineers build, deploy, and operate software, making the secure path the easiest path you will ensure that security is built into how engineers build, deploy, and operate software.

The role will involve:

  • Design, implement, and maintain secure-by-default platform capabilities (e.g. IAM patterns, network primitives, secrets management, runtime protections, encryption) that are easy for product teams to adopt.
  • Build automated security checks, guardrails, and visibility that continuously assess risk and reduce the need for manual security audits.
  • Collaborate with engineering to embed secure software development practices into CI/CD pipelines, templates, and shared tooling (Shift left and Secure by design principles).
  • Reduce manual work (toil) for the technology and Security Operations Team using automation (e.g. scripting, workflows, tooling).
  • Ensure platform-level security telemetry, logging, and monitoring are consistent, high-quality, and provided as a standard capability for all teams.
  • Define and implement platform-wide security use cases (e.g. SIEM detections, alerts, and signals) that scale across teams without bespoke configuration
  • Work as part of a virtual SOC with the Security Operations Team to support in security incident response.
  • Stay up-to-date with the latest security trends and best practices.
  • Enable secure engineering practices through documentation, examples, platform defaults, and targeted training where appropriate.
  • Help translate security policies and standards into practical, enforceable platform patterns and guardrails..

Requirements

WE ENCOURAGE YOU TO APPLY, EVEN IF YOU MIGHT NOT MEET ALL THE REQUIREMENTS. YOU’LL BE DIRECTLY REPORTING TO AN ENGINEERING MANAGER, WHO WILL HELP MENTOR AND GUIDE YOU IN YOUR CAREER.

  • Proven experience as a Platform engineer, Developer Experience engineer, or similar role focused on enabling other engineers.
  • Proven experience working with Containers and serverless with Infrastructure as code.
  • Good knowledge of AWS cloud security best practices and tooling
  • Technical knowledge of best practice security for networks, systems, web applications, APIs and databases.
  • Good understanding of secure software development practices.
  • Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners.
  • Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs).
  • Knowledge of security standards and frameworks (e.g. ISO27001, NIST CSF, AWS FSBP) is beneficial.
  • Relevant security certifications (e.g. GCLD, Security+, AWS/GCP Security Certifications) are a plus.
  • Excellent problem-solving and analytical skills.
  • Strong communication and collaboration abilities

BENEFITS

We've got your back, in life's biggest moments and the everyday ones too.

  • Competitive salary
  • Equity scheme - we all share in Motorway’s success
  • 25 days holiday
  • Flexible working (2 days a week in our London office, with socials and snacks galore)
  • Private medical insurance via BUPA
  • Life assurance
  • Pension scheme (we contribute 5%)
  • Enhanced family leave (e.g. 26 weeks full pay for maternity or adoption)
  • 24/7 Employee Assistance Programme
  • EV leasing scheme
  • Cycle to work scheme
  • Nursery salary sacrifice scheme
  • 1 paid volunteering day a year

Source: Motorway careers (Ashby)

Similar roles

More roles at Motorway