Senior Security Engineer

I’m recruiting for a Senior Software Cybersecurity Engineer to join a high-profile technology organisation, working across Application Security, Cloud, Kubernetes and DevSecOps., You’ll work closely with software engineering teams to embed security throughout the SDLC, identify vulnerabilities and improve secure-by-design practices., * Threat modelling, risk assessments & security architecture reviews

• Cloud & Kubernetes/container security
• Security code reviews and secure-by-design guidance
• Implementing SAST, DAST, SCA, SBOM & Secret Scanning
• Driving vulnerability management and remediation
• Vulnerability triage, validation & PoC development
• IAM and key management
• Security incident response & root-cause analysis
• Detection engineering and security automation
• Developing security standards, processes and technical runbooks

• 7+ years’ Cybersecurity / AppSec / Security Engineering experience
• Strong Cloud & Kubernetes security experience
• Proven DevSecOps / CI/CD security experience
• Strong knowledge of SAST, DAST, SCA & vulnerability management
• Threat modelling experience - STRIDE / PASTA
• Hands-on development experience with Go and/or C#
• Strong understanding of OWASP, NIST, ISO 27001 & CIS
• Experience with AWS, Azure or GCP

Desirable: vulnerability research, exploit development, penetration testing, Splunk/OSQuery, AI/ML security and security certifications.