Senior Security Engineer

I'm supporting a global technology organisation within the key and asset management space who are looking for a Senior Security Engineer to strengthen and mature their security posture across cloud, mobile and physical systems.

Reporting into the DevOps Lead, you will act as the subject matter expert for secure-by-default practices across the full software development lifecycle. The business has made strong progress over the last 12 months in threat detection and modelling; now they need someone who can drive remediation, uplift guardrails, and ensure consistent security across a hybrid environment.

You'll work across embedded devices, cloud infrastructure, on-prem systems, and companion mobile applications, ensuring policies are meaningful, communicated clearly, and translated into practical implementation.

This is a remote-first position with occasional visits to the UK office as required.

You're likely someone who has come from a Support, Infrastructure, or Systems background and grown into a security role. You have a strong understanding of cloud security, OS hardening, and the realities of supporting environments that combine SaaS, on-prem, and IoT components.

You're comfortable being a senior technical contributor, working closely with DevOps and Engineering teams, and clearly explaining the value and impact of the improvements you make.

A pragmatic mindset, ability to operate with autonomy, and experience across complex architectures will make you successful here.

Requirements:

• Strong knowledge of security architecture in Azure and/or AWS (Azure preferred)
• Expertise in hardening operating systems and infrastructure (Linux/embedded/mobile/cloud)
• Broad engineering skills: C#, Linux toolchains, Bash, PowerShell
• Hands-on experience with IaC tools such as Terraform, Bicep, or CloudFormation
• Familiarity with OWASP, CVE, and general infrastructure and software security frameworks
• Experience working in hybrid environments including physical infrastructure, virtualisation and data centres
• Ability to implement and communicate tangible security improvements
• Exposure to IoT or complex distributed architectures is highly beneficial
• Understanding of mobile security across iOS/Android is advantageous