> Markdown version of [/jobs/ext/2476853-lead-security-engineer](https://www.wearedevelopers.com/jobs/ext/2476853-lead-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Security Engineer

- **Company:** Fazer Recruitment
- **Location:** London, UK
- **Experience:** Expert
- **Salary:** £77,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Amazon Web Services, Software as a Service, Cloud Computing, Cyber Security, Python (Programming Language), Windows PowerShell, Zero Trust Network Access, Security Information and Event Management, Software Vulnerability Management, Scripting, Information Technology, Cloudflare, Terraform
- **Published:** August 12, 2026
- **Apply:** https://www.reed.co.uk/jobs/lead-security-engineer/57228942

## About the Role

* An IT infrastructure grounding - networking, endpoint, systems, identity - with a move into security. Infrastructure Engineer, Systems/IT Engineer, Cloud or Platform Engineer backgrounds all welcome
 * Hands-on delivery of at least one of the three priorities above from a low-maturity start - through the deployment, tuning and adoption phases, not inheriting it already running
 * Experience in a lean security or IT function where you led delivery, rather than one contributor in a large layered team
 * The judgement to make sound security calls in ambiguous situations, and the communication skills to influence without authority

Depth of prior security experience matters less than the engineering foundation and the appetite to own something end to end.

Nice to have: Cloudflare (particularly Access/ZTNA); GCP or AWS security; scripting (Python, PowerShell) or Terraform; eComm or marketplace background.

## Description

A well-established eComm business is building out its security engineering capability, and wants an engineer to own it. This is a build role - the controls and programmes here are early-stage, not inherited.

They're prioritising IT foundation and attitude over years in a security job title. If you came up through infrastructure, networking or identity and have moved into security, they want to hear from you.

The role

Reporting to the Information Security Manager, you'll cover a cloud-first estate spanning GCP and AWS, marketplace technology, SaaS and in-house engineering. Security maturity is early, so you'll be standing capabilities up and driving adoption, not maintaining someone else's platform.

Your first priorities:

 * Asset & Application Visibility - continuous, automated discovery across the estate, from a standing start
 * Zero Trust / ZTNA rollout - identity-aware access across remote and internal services
 * Automating identity lifecycle (JML) in Entra ID and key SaaS platforms

Alongside that: SIEM engineering and detection tuning, vulnerability management, DLP, and incident response support - with a strong bias toward automation.


## Related Videos

- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Fireside Chat with Cloudflare's Chief Strategy Officer, Stephanie Cohen (with Mike Butcher MBE)](https://www.wearedevelopers.com/videos/1366-fireside-chat-with-cloudflare-s-chief-strategy-officer-stephanie-cohen-with-mike-butcher-mbe)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)