Carbon3.ai
Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Must have the ability to achieve Security Clearance. (Won't be an immediate request but within the next 12 months).
Role Summary:
We are seeking a Security Engineer to design, implement, and continuously improve security controls across our next-generation AI infrastructure and datacentre operations. This role focuses on protecting Kubernetes-based and cloud-native environments, securing our datacentre networking and infrastructure stack, strengthening security posture, identifying and mitigating risks, and enabling secure software delivery practices.
You will work closely with engineering, platform, and operations teams to integrate security into Era4's proprietary cloud infrastructure, datacentre networks, CI/CD pipelines, containerized workloads, GPU-accelerated compute, and AI/ML platforms. The successful candidate will combine hands-on technical expertise with a proactive approach to threat detection, vulnerability management, and security automation across our brownfield-to-modern bare metal and cloud infrastructure environments.
Key Responsibilities:
Cloud & Infrastructure Security:
- Design, implement, and maintain security standards and controls for Kubernetes, Era4's proprietary cloud infrastructure.
- Secure data center perimeter and internal networks using Palo Alto, OpnSense, and Nokia networking platforms.
- Review infrastructure architectures and perform security assessments to identify risks and recommend mitigations.
Application & DevSecOps Security:
- Integrate security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, container image scanning, and secrets detection.
- Partner with development teams to implement secure coding practices and remediate security findings.
- Conduct threat modeling and security reviews for new applications, services, and infrastructure changes.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Vulnerability & Risk Management:
- Lead vulnerability identification, prioritization, remediation, and reporting activities across infrastructure and applications.
- Develop processes for continuous security assessment and compliance monitoring.
- Track security metrics and drive remediation efforts with engineering teams.
Detection & Response:
- Develop and maintain security monitoring, alerting, detection capabilities, and incident response playbooks.
- Investigate security incidents, perform root cause analysis, and coordinate remediation activities.
- Support threat hunting and proactive identification of suspicious activity across cloud and Kubernetes environments.
Security Automation:
- Build automation to improve security monitoring, compliance validation, vulnerability management, and incident response workflows.
- Leverage Infrastructure as Code and policy-as-code frameworks to enforce security standards at scale.
- Integrate security tooling into existing operational and engineering workflows.
Required Qualifications & Experience:
- In-depth experience in Security Engineering, Cloud Security, DevSecOps, Infrastructure Security, or Datacentre Security.
- Expert knowledge of cloud security principles and experience securing Kubernetes environments, container security, workload protection, and cloud-native security tooling.
- Hands-on experience with data centre network security, firewalls, and network segmentation (Palo Alto firewalls, OpnSense, Nokia networking, or similar).
- Familiarity with CI/CD security controls, secure software development practices, and supply chain security.
- Experience with SIEM, logging, monitoring, and security analytics platforms.
- Hands-on experience with vulnerability management platforms and security assessment methodologies.
- Scripting and automation skills using Python, Bash, or similar languages.
- Experience implementing security controls using Infrastructure as Code (Terraform, Ansible, or similar).
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Nice to Have:
- Experience securing AI/ML or GPU-based infrastructure.
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF, CIS Benchmarks, or PCI DSS.
- Experience with threat modeling, penetration testing, or red team engagements.
- Security certifications such as CISSP, GSEC, GCIH, GCIA, CCSK, CCSP, or relevant cloud security certifications.
Why Join Era4:
You’ll be joining a mission-driven start-up building critical national infrastructure, where operational excellence directly enables growth. This role offers high visibility with leadership, real autonomy, and the chance to shape how a next-generation company operates at scale.
Diversity & Inclusion:
Era4 is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location