Senior Security Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Design and develop secure, cloud-based software solutions for clients.

• Collaborate with technology teams within a multi-disciplinary Agile environment.

• Apply DevSecOps practices throughout the entire software development lifecycle.

• Integrate vulnerability management, threat modeling, secret scanning, container security, SAST, and DAST methodologies.

• Automate the generation of security artifacts.

• Provide expertise in application security or cloud security.

• Educate teams about threats and vulnerabilities while identifying suitable security controls.

• Enhance cyber security awareness among delivery teams.

• Work closely with application development and cloud platform teams to plan and prioritize SSDLC security needs.

• Suggest cloud security best practices and automate compliance with security standards such as CIS Benchmarks.

• Implement automated security tools within CI pipelines.

• Coordinate with external organizations to plan, scope, and conduct penetration tests.

• Evaluate and prioritize security tool outputs into actionable security stories.

• Ensure adherence to security principles, architectural patterns, and requirements.

• Foster the adoption of cyber security practices within Agile teams.

• Mentor and develop junior team members.

⛳️ Requirements

• Proven experience in implementing application security or cloud platform security.

• Background in the Defence Sector.

• Active Security Clearance.

• In-depth knowledge of web application security.

• Familiarity with modern cryptography, including encryption in transit, encryption at rest, hashing, and digital signatures.

• Understanding of threat modeling, vulnerability management, application security testing, and penetration testing.

• Experience integrating application security tools such as static and dynamic analysis into the SSDLC.

• Proficient in modern version control systems like Git.

• Skilled in Bash, PowerShell, Python, Java, .NET, JavaScript, Terraform, ARM Templates, Ansible, or similar automation technologies.

• Capability to communicate security issues to both technical and non-technical audiences.

• Industry-recognized Cyber Security qualification is a plus.

• AWS or Azure mid-level certifications are desirable.

• Engagement in the cyber security community is a plus.

• Familiarity with Agile software development methodologies such as Scrum or Kanban is desirable.

🏝️ Benefits

• People-first culture.

• Support for growth and development.

• Diverse and inclusive workplace.

• Recruitment accommodations and adjustments.

• Engaging work with cutting-edge technologies.

• Comprehensive employer benefits.

• Recognition among the Sunday Times Top 100 Best Companies.