IT Security Cloud Security Engineer

Cloud Security Engineer We're putting together a talented team to build the #1 training platform for Runners We help everyday runners become outstanding by providing world-class training, coaching and community for everyone, whether you're improving your 5k time or training for your first marathon. To date we have built iOS, Android and Apple watch apps that help people achieve their goals by coaching them through the full journey and syncing to their favourite fitness devices. We want to grow as fast as we can into the future and are looking for individuals who will help us get there. We’re now looking ahead to the future and the people who want to help us build and scale Runna. Our aim is to reach millions of subscribers in the next 5 years and be the go-to training platform for any runner. We are looking for a talented, creative, and proactive Security Engineer to join our highly skilled cross-functional engineering team and take ownership of security across the entire organisation. As the first security engineer, you’ll lead efforts to ensure our cloud infrastructure, applications, and internal processes meet the highest security standards. You’ll work closely with the engineering, product, and leadership teams to establish a strong security culture while also ensuring compliance with relevant regulations. You will partner with our CTO and founders to shape the future of security at Runna and play a critical role in safeguarding our product as we scale. As our first dedicated security hire, you’ll have the freedom and support to build a security roadmap from the ground up. As a Security Engineer, your role will include: Lead the effort to secure our cloud infrastructure, ensuring secure deployments, access controls, and robust incident response strategies. Establish security monitoring and alerting to detect, respond to, and mitigate potential threats in real-time. Implement and enforce best practices for encryption, identity and access management (IAM), and network security across the platform. Partner with product, engineering, and business teams to ensure security is embedded in all stages of development and product lifecycle. Create and manage a bug bounty program to incentivise external researchers to identify and report security vulnerabilities. Educate and train the wider team on security best practices, fostering a security-first mindset across the organisation. Collaborate with external security firms for audits, penetration testing, and other assessments to validate our security posture. 3+ years in a Security Engineering role or similar ~2+ years working with cloud infrastructure (preferably AWS) or as a platform engineer ~ You’ve led the development and implementation of key security projects ~ Experience with security frameworks, policies, and compliance standards (e.g., Familiarity with penetration testing, vulnerability assessments, and incident response gained through practical experience Experience with securing cloud infrastructure, ideally within AWS (e.g., VPC, IAM, Security Groups, CloudTrail, GuardDuty). Experience with security monitoring and observability tools (e.g., AWS CloudWatch, Aikido, Datadog). Bonus points if you: Are familiar with DevSecOps principles and integrating security into the CI/CD pipeline. Frontend: React Native (iOS and Android) Typescript Serverless (AWS) Lambdas (NodeJS & Python) AWS AppSync Cloud Security Engineer Interview Process Introductory chat (25-minute video call) #Once the process is finished, we promise to let you know our decision as soon as possible.