Security Engineer

TyneStack Partners is recruiting a Security Engineer for an established UK financial services and technology business.

This is an exciting opportunity to join a growing security function and help shape how applications are secured across the organisation.

It’s a newly created position offering genuine ownership, the opportunity to work closely with experienced software developers and the chance to introduce new ideas, tools and security practices.

We’re interested in hearing from Application Security Engineers, DevSecOps Engineers, Application Penetration Testers and software developers who have developed strong security expertise.

You don’t necessarily need to have held the title of Security Engineer before.

What you’ll be doing

• Working closely with development teams to identify and address security vulnerabilities.

• Helping improve secure software development practices and application security controls.

• Supporting application security testing, code scanning and vulnerability remediation.

• Conducting threat modelling, security assessments and secure design reviews.

• Commercial experience in application security, DevSecOps, penetration testing or secure software development.

• A good understanding of common application vulnerabilities, including OWASP Top 10.

• Experience assessing application security risks and working with technical teams to resolve them.

• Knowledge of security testing tools such as Burp Suite, SonarQube, Snyk, OWASP ZAP or similar.

• Understanding of software development processes, secure coding or CI/CD pipelines.

• Strong communication skills and the confidence to work with experienced developers.

• A practical, proactive approach and willingness to take ownership.

Experience with Azure, .NET, C#, APIs, threat modelling or security automation would be advantageous.

• Permanent position within an established financial services and technology organisation.

• Flexible hybrid working based on distance from Newcastle.

• Opportunity to help establish application security practices from the ground up.

• Direct collaboration with experienced development and cybersecurity teams.

• Genuine ownership and the opportunity to influence technical decisions.

• A substantial technology environment with opportunities to improve security tooling and development practices.

Flexible working arrangements

• Within 25 miles of Newcastle: 3 office days per week.

• More than 25 miles away: 2 office days per week.

• More than 50 miles away: 2 consecutive office days per month.

Applicants must have the right to work in the UK without requiring employer sponsorship.

Interested?

Whether you’re already working in application security, have a penetration testing background or have moved into security from software development, we’d be interested in hearing from you.