Security Engineer

We’re supporting a major transformation programme and are looking for a Security Engineer to help deliver and maintain security controls across multiple technology workstreams. Working closely with senior security specialists, you’ll play a key role in securing cloud platforms, improving DevSecOps processes, managing vulnerabilities, and ensuring security is embedded throughout delivery., * Implement and optimise CI/CD security tooling.

• Manage vulnerabilities and support remediation activities.
• Review infrastructure, code and configuration changes for security risks.
• Support threat modelling and security assurance activities.
• Maintain secrets management, certificates and access controls.
• Develop reusable security controls and best practices.
• Produce security documentation and evidence where required.

• Security Engineering, DevSecOps or Platform Engineering background.
• AWS, IAM, Kubernetes and container security experience.
• Terraform and Infrastructure-as-Code.
• CI/CD security tooling (SAST, SCA, container and IaC scanning).
• Python and/or Bash scripting.
• Vulnerability Management, CVSS and risk assessment experience.
• Previous experience within a regulated environment.