Security Engineer

Security Engineer

Salary: Up to 85,000 (depending on experience)
Locations: London, Leeds, Middlesbrough, Bristol or Bournemouth
Working Pattern: Hybrid - two days per week in one of the above offices

An established enterprise organisation is undertaking enhancements to its digital platforms as part of an ongoing modernisation strategy. As a Security Engineer, you will provide hands‑on technical security expertise across software development, delivery and continuous improvement. You will play a key role in shaping and securing a modern digital platform, ensuring compliance with internal policies and industry regulations, while embedding security best practice across the engineering lifecycle.

• Analysing new feature code to identify security risks and working closely with engineering teams to mitigate them
• Delivering improvements to DSOMM maturity, either by enabling delivery teams or directly owning tasks (including coding, configuration, tooling and documentation)
• Working with Information Security teams to ensure security policies are implemented in a pragmatic, efficient and flexible manner
• Designing, building, operating and monitoring secure technology solutions for large‑scale, complex B2C and B2B applications
• Applying security knowledge across multiple technology platforms, contributing to secure adoption of new tools and services
• Defining, upholding and contributing to secure coding standards and the software delivery lifecycle
• Designing, building and optimising logging and monitoring solutions to improve visibility, reliability and overall platform performance

• Experience with cloud‑native software development, including cloud infrastructure and API design (Azure preferred)
• Willingness to apply security and engineering expertise across multiple platforms, such as Azure and SaaS solutions
• Proven experience working with modern security standards and frameworks, including OWASP CI/CD, DSOMM and SAMM
• Strong knowledge of networking protocols (TCP/IP, UDP, HTTP/3, AMQP, streaming protocols), cloud networking concepts (VPNs, subnets, regions/zones) and integration technologies
• Hands‑on experience with SAST and SCA tools such as Snyk and Checkmarx
• Experience with DAST tools such as OWASP ZAP or Qualys DAST (preferred), ideally working with HTTP APIs
• Ability to manage and support large‑scale software estates, including build, release, monitoring, rollback and high availability
• Practical experience building and maintaining automated security testing suites

Must be eligible and authorised to work in the United Kingdom

• Competitive base salary dependent on experience
• Annual company and performance‑related bonus
• Contributory pension scheme with enhanced employer contributions
• Life assurance
• Private medical cover
• 28 days annual leave plus bank holidays
• Option to buy or sell additional annual leave
• Wellbeing services and employee support resources
• Employee discount programmes