> Markdown version of [/jobs/ext/3562314-security-engineer](https://www.wearedevelopers.com/jobs/ext/3562314-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Era4
- **Location:** UK
- **Salary:** £54,915.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software System Penetration Testing, Build Automation, Bash Shell, Cloud Computing, Cloud Computing Security, Continuous Integration, Data Centers, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Network Segmentation, PCI Data Security Standards, Red Team (Cyber Security), Azure Machine Learning, Runbook, Software Engineering, Software Vulnerability Management, Policy as Code, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, Containerization, Kubernetes, Bare Metal, CIS Benchmarks, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** October 3, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5909681788

## About the Role

* Experience in Security Engineering, Cloud Security, DevSecOps, Infrastructure Security, or Datacentre Security.
 * Hands-on experience with vulnerability management platforms and security assessment methodologies.
 * Familiarity with CI/CD security controls, secure software development practices, and supply chain security.
 * In-depth scripting and automation skills using Python, Bash, or similar languages.

Nice to have:

 * Experience securing AI/ML or GPU-based infrastructure, datacentre network security, firewalls, and network segmentation (Palo Alto firewalls, OpnSense, Nokia networking, or similar).
 * Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF, CIS Benchmarks, or PCI DSS.
 * Experience with threat modelling, penetration testing, or red team engagements.
 * Security certifications such as CISSP, GSEC, GCIH, GCIA, CCSK, CCSP, or relevant cloud security certifications.

## Description

You will work closely with engineering, platform, and operations teams to integrate security into Era4's proprietary cloud infrastructure, datacentre networks, CI/CD pipelines, containerized workloads, GPU-accelerated compute, and AI/ML platforms. The successful candidate will combine hands-on technical expertise with a proactive approach to threat detection, vulnerability management, and security automation across our brownfield-to-modern bare metal and cloud infrastructure environments., Cloud & Infrastructure Security

 * Design, implement, and maintain security standard and controls for on prem Kubernetes.
 * Review infrastructure architectures and perform security assessments to identify risks and recommend mitigations.

Application & DevSecOps Security

 * Integrate security controls into CI/CD pipelines, including SAST, DAST, dependency scanning, container image scanning, and secrets detection.
 * Partner with development teams to implement secure coding practices and remediate security findings.
 * Conduct threat modelling and security reviews for new applications, services, and infrastructure changes.

Vulnerability & Risk Management

 * Lead vulnerability identification, prioritisation, remediation, and reporting activities across infrastructure and applications.

Detection & Response

 * Develop and maintain security monitoring, alerting, detection capabilities and incident response playbooks.
 * Investigate security incidents, perform root cause analysis, and coordinate remediation activities.

Security Automation

 * Build automation to improve security monitoring, compliance validation, vulnerability management, and incident response workflows.
 * Leverage Infrastructure as Code and policy-as-code frameworks to enforce security standards at scale.