> Markdown version of [/jobs/ext/3882787-security-engineer](https://www.wearedevelopers.com/jobs/ext/3882787-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** numi
- **Location:** London, United Kingdom
- **Experience:** Expert
- **Salary:** £69,394
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing Security, Code Review, Continuous Integration, Relational Databases, Identity and Access Management, Key Management, PostgreSQL, Network Segmentation, Program Analysis, Software Vulnerability Management, Web Applications, ReactJS, Software Security, Backend, Build Management, Production Code, Front End Software Development
- **Published:** October 23, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5937655893

## About the Role

* Five or more years as a software engineer, with substantial time spent in security-focused work, whether as a security engineer or a product engineer who owned security. You are comfortable being measured as an engineer first.
 * Strong backend development experience. Go is strongly preferred; deep experience in a comparable language with a willingness to work in Go is acceptable.
 * Demonstrable, hands-on ownership of cloud security in a production AWS environment. You should be able to reason about IAM design, network segmentation, secrets management, and data isolation in a multi-tenant system without reaching for a reference.
 * Threat modelling as a practised discipline rather than an occasional exercise, along with the ability to run it with engineers who haven't done it before.
 * Practical experience with application security: you can find, exploit, and fix the vulnerabilities that matter in a web application backed by a relational database, and you know which ones don't matter.
 * Comfort working in a small team where you will be the security depth, without a larger security function behind you.

Desirable

 * Experience in a domain with irreversible, high-value transactions: digital asset custody, payments infrastructure, finance, or similar.
 * Frontend experience with React, or enough to be dangerous in code review.
 * Experience supporting a formal security or compliance regime from the engineering side, such as SOC 2 Type II, ISO 27001, or a government assurance framework.
 * Detection and response tooling experience, particularly building or operating it rather than just buying it.
 * Experience as the first or only security-focused engineer somewhere.
 * Postgres depth: schema design, row-level security, and performance under audit-heavy workloads.

## Description

* Contribute to day-to-day product development as a senior engineer: designing, writing, reviewing, and shipping production code in Go and React.
 * Own the security dimension of engineering work: lead threat modelling on new features and architectural changes, drive secure design decisions, and review high-risk changes.
 * Own and improve the security of the AWS estate: IAM design, network segmentation, secrets management, and data isolation in a multi-tenant system.
 * Build security into the development lifecycle: dependency and vulnerability management, CI/CD security controls, static and dynamic analysis, and the tooling that makes the secure path the easy path.
 * Design and build product security features where the domain demands them: audit integrity, tamper evidence, access controls, and data isolation.
 * Lead the technical side of incident response: detection, investigation, and remediation, plus the exercises that keep the team ready.
 * Support client-facing security work with technical depth: contribute to security questionnaires, due diligence responses, and client assessments where engineering answers are needed.
 * Raise the security literacy of the wider team through design reviews, pairing, and pragmatic internal guidance, rather than policy documents.