Lead Platform Security Engineer

Job Brief: Platform Security EngineerOverviewAs a member of the London Market Platform Engineering Chapter, the Platform Security Engineer plays a key role in strengthening and evolving the security posture of Hiscox's cloud and on-premises platforms. Working across multiple Innovation Squads and Engineering Chapters, you will help design, implement, and automate security controls throughout the software development lifecycle, ensuring security is embedded by design and delivered at scale.As part of a Chapter spanning Platform and Site Reliability Engineers, you will help build and maintain secure Azure and GCP infrastructure using Terraform and Azure DevOps, while ensuring robust monitoring, alerting, and operational security controls are in place across infrastructure, applications, and data platforms.With security embedded across all squads, you will help drive the adoption of modern DevOps and security practices. You will work closely with engineering teams to identify and remediate vulnerabilities, respond to emerging threats, investigate security incidents, and contribute to post-incident reviews that strengthen resilience and prevent recurrence.ResponsibilitiesHelp to design, implement, and automate security controls and security testing within the SDLC.Apply Security-as-Code principles by providing training, creating reusable patterns, and establishing best practices for teams.Respond swiftly to new and emerging security threats and vulnerabilities, investigate suspected attacks, and help manage security incidents, including post-incident reviews to identify root causes, implement solutions, and prevent recurrence.Act as a point of contact, reporting into the Principal Platform Security Engineer for security-related inquiries across London Market technology and change initiatives, coordinating with Group, other Business Units, and Cyber teams to advance security practices across Hiscox.Help to build and maintain secure Azure and GCP infrastructure across all environments using Azure DevOps Pipelines and Terraform.Build and maintain monitoring and alerting at all levels (infrastructure, application, and data), ensuring actionable signals and secure operational practices.Requirements and ExperienceDevOps/Platform Engineering experience , working on solutions in Azure or hybrid cloud. Preferably with Azure DevOps.Experience with Terraform, and platform solutions.Experience working on solutions with integrations between GCP and Azure.Knowledge of Cloud native, microservices and containerised systems.Knowledge of full‑stack application and infrastructure solution design, ensuring robust security controls, high availability, and operational resilience throughout.Working knowledge of vulnerability and compliance management (scanning through to remediation), patch management, endpoint protection/anti-malware, and access control management (e.g., IAM/PAM), including driving findings to closure.Experience with AppSec tooling, including CI/CD integration, tuning to reduce noise, and triaging results with engineers to prioritise remediation and prevent regressions.To have a strong desire for continuous improvement and an Agile way of working.Location and DurationThis Platform Security Engineer based off-shore. Language: English (Medium Offshore DevOps Engineering)The duration of the statement of work will be 12 months commencing on 02/11/2026, with a possibility of extension, depending on the project needs and performance.