Cyber Security Engineer

About the Company

CORTO is a cutting-edge software company dedicated to revolutionising the legal industry through AI-driven solutions. We empower legal practitioners with intelligent software that automates routine tasks and enhances decision-making. As a fast-growing technology business, we are scaling rapidly and offer a highly technical environment where engineers and developers drive innovation.

Responsibilities

• Design, implement, and maintain cloud security controls across IAM, networking, logging, encryption, and monitoring
• Review cloud architectures and infrastructure-as-code to ensure alignment with security standards
• Define and maintain cloud security guardrails, technical standards, and playbooks
• Manage and improve security tooling including CNAPP, SIEM, XDR, and vulnerability scanning
• Monitor, investigate, and respond to security alerts and incidents
• Conduct vulnerability assessments, risk analysis, threat modelling, and API security assessments
• Support SOC 2 compliance, customer trust requests, and third-party risk assessments

Requirements

• 3–5 years of experience in Cyber Security Engineering roles
• Strong hands-on experience securing AWS environments
• Solid understanding of IAM, network security, encryption, Microsoft Entra security, and endpoint security
• Good understanding of security frameworks such as SOC 2, CIS, or NIST
• Working knowledge of incident response processes

Preferred Qualifications

• Experience in SaaS or regulated industries
• AI Security exposure (generative AI risks, prompt injection, data leakage)
• AWS Certifications (Solutions Architect Associate or AWS Security)
• Security certifications such as Security+ or OSCP

Benefits

• Flexible and hybrid working arrangements
• Career and learning opportunities in a scaling business
• Access to LEAP Home program to support primary residence purchases
• Additional time off and gym membership
• Social events and access to sailing and yacht events