security engineer for ecommerce

Motorway is the UK's largest online car-selling platform. It connects private sellers directly with over 8,000 dealers nationwide, helping sellers achieve great prices while giving dealers fast, reliable access to vehicle stock. Founded in 2017, the technology-led company has redefined the experience of selling a car.

• Design, implement, and maintain secure-by-default platform capabilities, including IAM patterns, network primitives, secrets management, runtime protections, and encryption;
• Build automated security checks, guardrails, and visibility to continuously assess risk and reduce manual security audits;
• Collaborate with engineering to embed secure software development practices into CI/CD pipelines, templates, and shared tooling;
• Reduce manual work for the technology and Security Operations Team through automation, scripting, workflows, and tooling;
• Ensure consistent, high-quality platform-level security telemetry, logging, and monitoring for all teams;
• Define and implement platform-wide security use cases, including SIEM detections, alerts, and signals;
• Support security incident response as part of a virtual SOC with the Security Operations Team;
• Stay up to date with the latest security trends and best practices;
• Enable secure engineering practices through documentation, examples, platform defaults, and targeted training;
• Translate security policies and standards into practical, enforceable platform patterns and guardrails.

• Proven experience as a Platform Engineer, Developer Experience Engineer, or in a similar role focused on enabling other engineers;
• Proven experience working with containers and serverless technologies using Infrastructure as Code;
• Good knowledge of AWS cloud security best practices and tooling;
• Technical knowledge of security best practices for networks, systems, web applications, APIs, and databases;
• Good understanding of secure software development practices;
• Familiarity with SIEM, IDS/IPS, WAF, and vulnerability scanners;
• Knowledge of common adversarial Tactics, Techniques and Procedures (MITRE ATT&CK TTPs);
• Excellent problem-solving and analytical skills;
• Strong communication and collaboration abilities;
• Nice to have: knowledge of security standards and frameworks such as ISO27001, NIST CSF, and AWS FSBP; relevant security certifications such as GCLD, Security+, and AWS/GCP Security Certifications.

• Competitive salary;
• Equity scheme;
• 25 Days holiday;
• Private medical insurance via BUPA;
• Life assurance;
• Pension scheme with a 5% employer contribution;
• Enhanced family leave, including 26 weeks full pay for maternity or adoption;
• 24/7 Employee Assistance Programme;
• EV leasing scheme;
• Cycle to work scheme;
• Nursery salary sacrifice scheme;
• One paid volunteering day per year;
• Flexible working with 2 days a week in the London office.