Senior Software Cybersecurity Engineer

The Senior Software Cybersecurity Engineer will analyze software designs and implementations to identify and remediate security vulnerabilities across the SDLC., Security Design and Implementation

• Perform threat modeling, risk assessments, audits, and architecture reviews, focusing on Cloud and container environments.
• Manage Key Management and IAM controls.
• Support engineering teams by defining security requirements to meet compliance standards and industry best practices.
• Perform security code reviews and act as a technical SME for engineering and compliance teams.

Security Testing & DevSecOps

• Deploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines.
• Apply manual network/application testing, custom scripting, and unit test cases to validate controls.
• Recommend improvements to existing security tools, processes, and secure coding standards.

Vulnerability Management

• Drive vulnerability management with a focus on Kubernetes (K8s) and container images.
• Triage, validate (including writing PoCs), and prioritize scanning tool findings.
• Communicate security issues to stakeholders and manage remediation throughout the SDLC

Incident Response and Compliance

• Support product security incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks.
• Apply Detection Engineering principles, setting baseline app security parameters and maintaining IDS/IPS rules.
• Conduct post-incident analysis and lessons learned to refine response strategies.
• Monitor emerging threats to proactively integrate new protections and ensure compliance with standards (OWASP, NIST).

• Experience & Education: 7+ years in Security/Application Engineering; Bachelor’s degree in Computer Science, Information Security, or a related field.
• Leadership: Proven track record in leading process change, mentoring on secure-by-design principles, and driving continuous improvement.
• Cloud & Container Security: Strong knowledge of orchestration (AWS, Azure, GCP, Docker, Kubernetes) and container image vulnerability lifecycles.
• AppSec & DevSecOps: Deep understanding of threat modeling (STRIDE, PASTA), IAM, cryptography, web/network protocols (HTTP, REST, TLS, TCP/IP), and integrating security tooling (SCA, SAST, DAST) into CI/CD pipelines.
• Software Engineering: Hands-on development experience, specifically in Go and C#.
• Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides)., * Advanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems.
• Education & Certifications: Master’s degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security Specialty, OSCP, CISSP, SANS/GIAC).
• Soft Skills: Strong communication across technical and non-technical groups, calm under pressure, and experience in high-growth SaaS environments.

In return for your expertise, we’ll support you in this new challenge with coaching & development every step of the way. Also, to reward your hard work you’ll get:

• Competitive salary and bonus schemes
• Two weeks additional pay per year (holiday bonus).
• 25 days holiday entitlement + bank holidays.
• Attractive defined contribution pension scheme.
• Private medical insurance.
• Employee stock purchase plan.
• Flexible working options.
• Life assurance.
• Enhanced maternity and paternity pay.
• Career development support and wide ranging learning opportunities.
• Employee health and wellbeing support EAP, wellbeing guidance etc.
• Carbon neutral initiatives/goals.
• Corporate social responsibility initiatives including support for volunteering days.
• Well known companies discount scheme.

At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future. The Avigilon security team, which you will be a key member of, is responsible for maintaining and implementing security controls for all confidential and intellectual property data across our physical security and video security platform, within the Avigilon organization.

This role is hybrid, 2 days a week in our Uxbridge or Edinburgh offices.