Security Engineer

You will work closely with Infrastructure, Cloud, Development, DevOps and other security teams to embed security earlier in the technology lifecycle and reduce reliance on manual security processes. This is a hands-on role, engineering and improving security capabilities across cloud, identity, endpoint and vulnerability management. You will develop integrations, tooling and automation that improve security outcomes while simplifying how security is used by other teams., * Design, build, configure and maintain security platforms and protective controls across the technology environment.

• Develop security tooling, integrations and automation, turning repetitive or manual processes into scalable capabilities where appropriate.
• Support and improve identity security, privileged access and secrets management capabilities.
• Support the secure adoption of AI by understanding emerging risks and contributing to practical guardrails.
• Work closely with technology teams to embed security earlier in project and development lifecycles.
• Support and improve cloud security and the integration of security testing and controls into CI/CD and development workflows.
• Contribute to security architecture, technical design reviews and threat modelling, providing practical guidance on risk.
• Develop and maintain security integrations and data flows that support security operations and incident response, providing specialist engineering support during incidents where required.
• Test and continuously validate security controls, using the results to improve preventative and detective controls.
• Produce and maintain clear technical documentation for security platforms, integrations and solutions., At Core-Asset, we’re committed to protecting and respecting your privacy. Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. We may change this policy from time to time, so please check this policy occasionally to ensure that you’re happy with any changes.

• Practical experience within Cybersecurity, Infrastructure, Cloud Engineering, Identity & Access Management, DevOps or a closely related technical discipline.
• Strong knowledge and practical engineering experience across several of the areas below, with solid technical foundations and the ability to learn across different security domains.
• Security engineering and architecture principles, vulnerability management, security testing and control validation.
• Cloud security, with a good understanding of Windows and/or Linux environments and enterprise networking.
• Identity and access management, privileged access and secrets management.
• Security platforms, including endpoint security, SIEM, SOAR and other security technologies.
• Automation and integration skills, including scripting or development using PowerShell, Python, Bash or similar, API-based integrations and Infrastructure as Code.
• CI/CD pipelines, version control and integrating security controls and testing into development workflows.
• Understanding of AI technologies, emerging security risks and appropriate guardrails.
• A practical and curious engineer who enjoys solving technical problems and building security solutions that help others work securely.
• Comfortable learning and applying your experience to unfamiliar technologies and problems.
• A pragmatic approach to security, able to identify the risks that matter and turn them into practical solutions.
• Clear communication and good technical judgement, with the confidence to challenge existing approaches.
• Strong team working, systems thinking, data literacy and an improvement mindset.

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.