Security Engineer

I’m recruiting for a Senior Software Cybersecurity Engineer to join a high-growth technology organisation, working across Product Security, AppSec, Cloud, Kubernetes and DevSecOps.

What you’ll be doing:

• Embed security across the SDLC & CI/CD pipelines
• Threat modelling, risk assessments & security architecture
• Secure AWS/Azure/GCP, Kubernetes & containers
• Implement SAST, DAST, SCA, SBOM & secret scanning
• Vulnerability triage, validation, remediation & PoC development
• Security code reviews & secure-by-design guidance
• Detection engineering, automation & incident response
• Develop security standards, processes & technical runbooks

• 7+ years’ Cybersecurity / AppSec / Security Engineering experience
• Strong Cloud + Kubernetes security experience
• Proven DevSecOps / CI/CD background
• Hands-on SAST / DAST / SCA / vulnerability management
• Threat modelling experience (STRIDE / PASTA)
• Development experience with Go and/or C#
• Strong OWASP / NIST / ISO 27001 / CIS knowledge
• AWS, Azure or GCP experience

Desirable: Vulnerability research, exploit development, penetration testing, Splunk/OSQuery, AI/ML security & security certifications.

A genuinely hands-on Product Security role for someone who wants to work at the intersection of software, cloud and cybersecurity.