SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Motorway is the UK's largest online car-selling platform, connecting private sellers with over 8,000 dealers nationwide. Founded in 2017 and backed by leading technology investors (£143M Series C), the company is rapidly scaling its technology team.
You will join as a Senior Developer Experience Security Engineer, responsible for embedding security into Motorway's developer workflows and platform infrastructure. The role bridges platform engineering and security, ensuring that secure practices are the default and easiest path for engineers to follow.
Key responsibilities:
- Design and implement secure-by-default platform capabilities including IAM patterns, network primitives, secrets management, runtime protections, and encryption that product teams can easily adopt.
- Build automated security checks, guardrails, and continuous risk assessment to reduce manual security audits.
- Embed secure software development practices into CI/CD pipelines, templates, and shared tooling using shift-left and secure-by-design principles.
- Reduce toil for the technology and Security Operations teams through automation, scripting, and tooling.
- Establish platform-level security telemetry, logging, and monitoring as standard capabilities across all teams.
- Define and implement platform-wide security use cases (SIEM detections, alerts, signals) that scale without bespoke configuration.
- Collaborate with the Security Operations Team on incident response as part of a virtual SOC.
- Enable secure engineering practices through documentation, examples, platform defaults, and targeted training.
- Translate security policies and standards into practical, enforceable platform patterns.
- Stay current with security trends and best practices.
The company recently built and rolled out a new container platform on AWS Fargate and is enhancing observability, reliability, and developer-focused tooling. You'll report to an Engineering Manager who will mentor and guide your career development.
REQUIREMENTS:
- Proven experience as a Platform Engineer, Developer Experience Engineer, or similar role focused on enabling other engineers.
- Proven experience with containers and serverless infrastructure using Infrastructure as Code.
- Strong knowledge of AWS cloud security best practices and tooling.
- Technical knowledge of security best practices for networks, systems, web applications, APIs, and databases.
- Good understanding of secure software development practices.
- Familiarity with security tools and technologies such as SIEM, IDS/IPS, WAF, and vulnerability scanners.
- Knowledge of common adversarial Tactics, Techniques and Procedures (MITRE ATT&CK TTPs).
- Knowledge of security standards and frameworks (ISO 27001, NIST CSF, AWS FSBP) is beneficial.
- Relevant security certifications (GCLD, Security+, AWS/GCP Security Certifications) are a plus.
- Excellent problem-solving and analytical skills.
- Strong communication and collaboration abilities.
