> Markdown version of [/jobs/ext/1945229-sc-cleared-senior-security-engineer-inside-ir35](https://www.wearedevelopers.com/jobs/ext/1945229-sc-cleared-senior-security-engineer-inside-ir35). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SC Cleared - Senior Security Engineer - Inside IR35 - **Company:** Sanderson Recruitment Plc - **Location:** Belfast, UK - **Experience:** Expert - **Contract:** Temporary contract - **Skills:** Kubernetes Security, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Code Review, Software Design Patterns, Identity and Access Management, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Python (Programming Language), Network Security, ArcSight SIEM Tool, Zero Trust Network Access, Secure Coding, Security Information and Event Management, Data Streaming, Systems Integration, Software Vulnerability Management, Policy as Code, Pulumi, Google Cloud, Mitre Att&ck, QRadar, Cloudformation, Terraform, Splunk, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** August 6, 2026 - **Apply:** https://www.apply4u.co.uk/jobs/x/42888745/ ## About the Role Key responsibilitiesBuild secure architectures for cloud-native systems - applying secure-by-design patterns, zero-trust principles, and least-privilege access across AWS, Azure, or GCP environments.Embed security into CI/CD pipelines, integrating SAST, DAST, SCA, and infrastructure-as-code scanning so vulnerabilities are caught before they ship, not after.Support threat modelling and design reviews with engineering teams, using structured methods (STRIDE, MITRE ATT&CK) to identify risks early and influence architecture decisions directly.Build and maintain security tooling and automation from policy-as-code and IaC guardrails (Terraform, OPA/Conftest) to custom scripts and integrations that scale good security practice across teams.Support vulnerability management by triaging findings from scanning and pentest engagements, prioritising by exploitability and impact, and applying mitigation and remediations.Support incident response readiness - building detection and alerting into systems, running exercises, and improving playbooks based on what's actually observable in the stack.Contribute to the commercial and technical health of engagements, flagging architectural risk early and surfacing opportunities to strengthen a client's security posture through better engineering, not more process.Skills, knowledge and expertise EssentialStrong hands-on experience securing cloud infrastructure in AWS, Azure, or GCP, including IAM design, network security, and secrets management.Experience embedding security tooling into CI/CD pipelines (SAST, DAST, SCA, container/IaC scanning).Proficiency in at least one scripting/programming language (Python, Go, or similar) for building security automation and tooling.Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight) , or building alerting/observability for security events from across an enterprise.Experience setting up segregated and secured hypervisor environments for the testing of potentially malicious software or code.Broader Skills DesirableCertifications such as OSCP, AWS/Azure/GCP security specialty certifications, Experience with infrastructure-as-code (Terraform, CloudFormation, Pulumi) and policy-as-code enforcement (OPA, Sentinel, Checkov).Experience supporting penetration testing and vulnerability scanning, and working closely with teaming team members to mitigate or remediate findings.Working knowledge of container and Kubernetes security, image hardening, admission controls, runtime protection.Familiarity with UK government security frameworks (GovAssure, NCSC Cyber Assessment Framework, HMG SPF) Experience contributing reusable security patterns, tooling, or paved-road templates back into an engineering practice.Evidence of mentoring engineers on secure coding and secure design, including pairing, code review, or internal training.Experience co-designing solutions with engineering teams and stakeholders Reasonable Adjustments:Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.TPBN1_UKTJ ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Why segmenting your infrastructure into tiers makes your infrastructure design better](https://www.wearedevelopers.com/videos/1960-why-segmenting-your-infrastructure-into-tiers-makes-your-infrastructure-design-better) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Unleashing Potential Across Teams: The Power of Infrastructure as Code](https://www.wearedevelopers.com/videos/930-unleashing-potential-across-teams-the-power-of-infrastructure-as-code) - [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Fullstack Developer Salary UK](https://www.wearedevelopers.com/magazine/251-fullstack-developer-salary-uk) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)