Security Engineer (Scrum)

• Security Architecture: Lead the design and implementation of robust security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures.

• DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines.

• Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals and risk management frameworks.

• Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness.

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations., * Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures.

• Hands-on experience with cloud security postures (AWS, Azure, or secure MOD-assured clouds).

• Proficiency in infrastructure-as-code (IaC) security and automated vulnerability management tools.

Leadership and Personal Strengths

• Authoritative yet collaborative communication style when engaging technical teams and military stakeholders.

• Decisive problem-solving capability under high-pressure compliance deadlines.

• Uncompromising commitment to data protection and national security standards.

Typical Qualifications / Experience

• Professional Experience: 7+ years’ experience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging MOD accreditors, NCSC guidelines, and cryptographic risk frameworks.

• Education & Foundational Benchmark: Cyber or IT NVQ Level 4 or equivalent higher education / degree in Information Security or Computer Science.

• Professional Certifications: Mandatory senior security certification: CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager); supplementary cloud security certification (e.g. CCSP, AWS/Azure Solutions Architect / Security Specialty).

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.