Back to search
Security Engineer
Salary: Up to 85,000 (depending on experience)
Locations: London, Leeds, Middlesbrough, Bristol or Bournemouth
Working Pattern: Hybrid - two days per week in one of the above offices
Overview:
An established enterprise organisation is undertaking enhancements to its digital platforms as part of an ongoing modernisation strategy.
As a Security Engineer, you will provide hands-on technical security expertise across software development, delivery and continuous improvement. You will play a key role in shaping and securing a modern digital platform, ensuring compliance with internal policies and industry regulations, while embedding security best practice across the engineering lifecycle.
Key Responsibilities:
- Analysing new feature code to identify security risks and working closely with engineering teams to mitigate them
- Delivering improvements to DSOMM maturity, either by enabling delivery teams or directly owning tasks (including coding, configuration, tooling and documentation)
- Working with Information Security teams to ensure security policies are implemented in a pragmatic, efficient and flexible manner
- Designing, building, operating and monitoring secure technology solutions for large-scale, complex B2C and B2B applications
- Applying security knowledge across multiple technology platforms, contributing to secure adoption of new tools and services
- Defining, upholding and contributing to secure coding standards and the software delivery lifecycle
- Designing, building and optimising logging and monitoring solutions to improve visibility, reliability and overall platform performance
Skills & Experience Required:
- Experience with cloud-native software development, including cloud infrastructure and API design (Azure preferred)
- Willingness to apply security and engineering expertise across multiple platforms, such as Azure and SaaS solutions
- Proven experience working with modern security standards and frameworks, including OWASP CI/CD, DSOMM and SAMM
- Strong knowledge of networking protocols (TCP/IP, UDP, HTTP/3, AMQP, streaming protocols), cloud networking concepts (VPNs, subnets, regions/zones) and integration technologies
- Hands-on experience with SAST and SCA tools such as Snyk and Checkmarx
- Experience with DAST tools such as OWASP ZAP or Qualys DAST (preferred), ideally working with HTTP APIs
- Ability to manage and support large-scale software estates, including build, release, monitoring, rollback and high availability
- Practical experience building and maintaining automated security testing suites
Eligibility: Must be eligible and authorised to work in the United Kingdom
Reward & Benefits:
- Competitive base salary dependent on experience
- Annual company and performance-related bonus
- Contributory pension scheme with enhanced employer contributions
- Life assurance
- Private medical cover
- 28 days annual leave plus bank holidays
- Option to buy or sell additional annual leave
- Wellbeing services and employee support resources
- Employee discount programmes
