Senior Cloud Security Engineer - Ai Resilience & Security Enhancements (Contract)
form3
100% Remote (Europe*)
AI
Uncategorized
Information Security
Cloud Solutions
Job Score
100 pts
On-site model (+70)
AI (+10)
Information Security (+10)
Cloud Solutions (+10)
THE PROJECT 📝
We're looking for an experienced Senior Cloud Security Engineer to join Form3 on a contract basis to deliver a strategic programme of security enhancements across our cloud-native payments platform.
Focusing on improving cloud security, operational resilience and governance across our engineering ecosystem, you will work closely with our Platform Engineering and Security teams to design and implement practical security improvements that enhance how we build, deploy and operate critical payment infrastructure.
You'll play a key role in strengthening areas such as cloud platform security, software supply chain security, identity and access management, AI governance, cryptographic controls and automated security assurance, ensuring solutions are scalable, production-ready and aligned with regulatory expectations.
Key responsibilities
- Assess the current cloud security posture across Form3 environments, identifying risks, control gaps and opportunities for improvement.
- Design and implement scalable cloud security controls that improve the resilience and security of our cloud-native platform.
- Enhance perimeter security controls across cloud infrastructure.
- Strengthen CI/CD pipeline security through secure build processes, automated security testing, deployment governance and artefact integrity.
- Improve production access security, including RBAC, least-privilege implementation, deployment tooling and operational processes.
- Enhance software supply chain security through dependency management, container image scanning, provenance, signing and vulnerability remediation.
- Contribute to the secure adoption and governance of AI-enabled engineering capabilities, including controls for data protection, auditability and operational resilience.
- Provide technical leadership and guidance on cloud security architecture and secure engineering practices.
- Produce high-quality technical documentation, including solution designs, implementation plans, operational procedures and security evidence.
- Collaborate closely with engineering, platform and security teams to deliver maintainable, production-ready security improvements.
- Ensure all deliverables align with operational resilience requirements, regulatory obligations and internal security standards.
- Deliver changes using structured, low-risk change management practices while maintaining service availability.
WE’RE LOOKING FOR 🔍
Essential
- Extensive experience designing and implementing cloud security solutions within large-scale cloud-native environments.
- Strong hands-on experience securing public cloud platforms (AWS preferred).
- Expertise in cloud security architecture, identity and access management, workload protection and infrastructure security.
- Experience securing CI/CD pipelines and modern software delivery practices.
- Strong understanding of software supply chain security, including dependency management, artefact signing, provenance and vulnerability management.
- Experience implementing least-privilege access models and RBAC.
- Knowledge of security monitoring, risk assessment and security governance.
- Experience working within highly regulated or business-critical production environments.
- Excellent stakeholder management and communication skills, with the ability to influence engineering teams.
- Strong technical documentation and design skills.
Desirable
- Experience implementing security controls for AI or machine learning platforms.
- Knowledge of cryptographic controls and key management.
- Experience with Infrastructure as Code and policy-as-code tooling.
- Familiarity with payment platforms or financial services environments.
- Understanding of operational resilience frameworks and regulatory requirements affecting critical financial infrastructure.
- Relevant cloud or security certifications (AWS Security Specialty, CISSP, CCSP or similar).
TECH STACK ⚙️
- AWS – Cloud infrastructure and security controls.
- Kubernetes – Container orchestration and workload security.
- Terraform – Infrastructure as Code and security automation.
- CI/CD tooling – Secure software delivery, build security and deployment governance.
- Container security tooling – Image scanning, vulnerability management and runtime protection.
- Identity & Access Management (IAM) – Least privilege, RBAC and privileged access controls.
- Software Supply Chain Security – Dependency scanning, artefact signing, provenance and integrity controls.
- Security monitoring & observability platforms – Detection, auditability and operational visibility.
- AI governance and security controls – Supporting secure adoption of AI-enabled engineering capabilities.
INTERVIEW PROCESS ✍️
Stage 1: Screening Call with Talent Team
Stage 2: Kubernetes & Linux Interview
Stage 3: Cloud Security & Engineering Best Practices interview
We always aim to stick to the above process, however there may be occasions when an additional interview stage is needed for us to be sure we’re hiring the right fit for the role.
HIRING LOCATIONS📍
Here are the locations that we are looking to engage with contractors from. Please note, we are not looking to engage with contractors outside of these locations.
- Austria
- Bulgaria
- Croatia
- Cyprus
- Estonia
- Greece
- Hungary
- Italy
- Latvia
- Lithuania
- Malta
- Romania
- Slovakia
- Slovenia
All contractors start their first day in our office to collect the equipment needed to work remotely.
ABOUT FORM3 💭
Revolutionising the world of payments with our cloud-native, multi-cloud platform. For more information about Form3, check out the following pages:
What we do | Life at Form3 | Payments Cannot Fail Series | .Tech Podcast
OUR DEI&B COMMITMENT
We hire talented people from a variety of backgrounds and experiences and are committed to a work environment based on diversity, open-mindedness and curiosity. We’re united by our company values (we even created them together!) and we celebrate our unique differences.
Our employee lifecycle processes are designed to embrace equal opportunity and prevent discrimination against our people regardless of personal characteristics. It is our strong belief that the more inclusive and belonging we are as a business, the better our work will be.
As an inclusive employer, we guarantee to interview all neurodiverse and physically disabled applicants who meet the minimum criteria for this role. We also encourage candidates to notify us of any reasonable adjustments that may be required during the recruitment process. This includes providing job adverts in alternative, accessible formats or adjustments required at interview stage.
If you consider yourself to be neurodiverse or physically disabled under the UN definition of disability and would like to be considered under this scheme and/or require any reasonable adjustments please let us know by sending an email to careers@form3.tech clearly stating your consent for us to process this data.
For more information please refer to our Recruitment Data Policy.
About Artificial Intelligence
Artificial Intelligence is currently the fastest-growing field in the technology market. The revolution in generative models (GPT, Claude, Gemini) has created massive demand for AI-specialized professionals.
Key areas of practice include Machine Learning Engineering, MLOps, Prompt Engineering, AI Research, and Applied AI. Python, TensorFlow, PyTorch, and LLM knowledge are essential skills.
AI salaries are the highest in the technology sector, with many remote work opportunities at international companies.
About Information Security
The Information Security area is one of the most strategic and in-demand fields in the technology market. With the rise of cyberattacks, data breaches, and regulations like LGPD and GDPR, companies of all sizes invest heavily in professionals who can protect their digital assets.
Key specializations include Network Security, Cloud Security (AWS, Azure, GCP), Offensive Security (Penetration Testing, Red Team), Defensive Security (SOC, Blue Team), AppSec, and Security Governance. Tools like SIEM (Splunk, QRadar), firewalls, EDR, and Vulnerability Management platforms are essential.
Certifications like CISSP, CEH, OSCP, CompTIA Security+, and AWS Security Specialty are important differentiators. Information security professionals are among the highest-paid in the sector, with growing demand especially in fintechs, healthtechs, and large enterprises.
About Cloud Solutions
The Cloud Solutions area is responsible for designing, implementing, and managing cloud infrastructure and services (AWS, Azure, GCP) for companies. Cloud professionals architect scalable, secure, and cost-optimized solutions, from data center migrations to serverless and multi-cloud architectures.
Key skills include IaC (Terraform, CloudFormation), containers (Docker, Kubernetes), serverless (Lambda, Cloud Functions), managed databases (RDS, DynamoDB, BigQuery), cloud networking (VPC, CDN, load balancer), and security (IAM, WAF, KMS). Knowledge of FinOps, cloud governance, and AWS/Azure/GCP certifications is a differentiator.
Cloud Solutions professionals in technology companies are highly valued, especially those who master multi-cloud architectures, FinOps, and can optimize costs while maintaining performance and security. The field offers opportunities from cloud engineer to cloud solutions architect, head of cloud, and chief cloud architect.
Discover Other Areas
Understand the scope of work, key skills, and tools used in different career areas.
About Account Manager
The Account Manager is the professional responsible for managing and expanding the relationship with clients after the sale. They act as a strategic partner, ensuring satisfaction, retention, and account growth, connecting client needs with company solutions.
Key skills include relationship management, negotiation, upsell and cross-sell, contract renewal, account planning, business reviews, metrics analysis (NPS, churn, LTV), and CRM knowledge (Salesforce, HubSpot). Communication, empathy, and business vision are fundamental differentiators.
Account Managers in technology and SaaS companies are highly valued, especially those who can increase recurring revenue (MRR/ARR) through account expansion and churn prevention. The field offers opportunities from account executive to director of accounts, with a focus on strategic relationship, revenue growth, and customer success.
About Branding
Branding is the area responsible for building, managing, and strengthening a brand's identity and market value. Branding professionals create strategies that define how the brand is perceived by the public, from the logo to the complete customer experience.
Key skills include brand strategy, visual identity, brand guidelines, positioning, naming, brand voice, market research, brand equity, and brand management. Knowledge of graphic design (Figma, Illustrator, Photoshop), storytelling, and brand experience is a differentiator.
Branding professionals in technology companies are highly valued, especially those who master employer branding, digital branding, and can build strong, memorable brands in competitive markets. The field offers opportunities from brand designer to head of brand, with a focus on identity, differentiation, and perceived value.
About Product Manager
The Product Manager (PM) is the professional responsible for defining the strategy, vision, and roadmap of a digital product. They work at the intersection of technology, business, and user experience (UX), leading the discovery and delivery of solutions that solve real problems in a viable way for the company.
Key skills include product discovery, data and metrics analysis (AARRR, NPS, LTV), user research, go-to-market strategy, roadmapping, strategic prioritization, and leadership by influence. Tools like Amplitude, Mixpanel, Hotjar, Jira, and Notion are fundamental.
Product Managers play a central role in the growth of startups, scale-ups, and large technology companies, with career progression opportunities to Product Leader, Head of Product, and Chief Product Officer (CPO).
About Ecommerce Manager
The Ecommerce Manager is the professional responsible for the entire strategic and operational management of online stores and marketplaces. They lead teams, define pricing, promotion, and catalog strategies, and monitor online sales performance across multiple platforms.
Key skills include catalog management, dynamic pricing, seasonal campaigns (Black Friday, Cyber Monday), marketplace management (Amazon, Mercado Livre, Shopee, Magalu), paid traffic, CRO, and team management. Knowledge of Shopify, VTEX, WooCommerce, Google Ads, Meta Ads, and performance metrics is a differentiator.
Ecommerce Managers in technology companies are highly valued, especially those who master multi-marketplace management, checkout optimization, and mobile commerce strategies. The field offers opportunities from ecommerce manager to head of ecommerce, with a focus on revenue, customer experience, and growth.
About Project Management
Project Management is essential to ensure strategic initiatives are delivered on time, within scope, and with quality. PM professionals coordinate teams, manage risks, and communicate with stakeholders.
Key methodologies include PMBOK, PRINCE2, Scrum, and Kanban. Tools like Jira, Asana, Monday, and MS Project are widely used in daily work.
Certifications like PMP and PgMP are important differentiators in the market, with growing demand in technology and consulting companies.