Senior Security Engineer

Senior Security Engineer

Location:

Manchester, England, United Kingdom

At Anaplan, we are a team of innovators focused on optimizing business decision‑making through our leading AI‑infused scenario planning and analysis platform, enabling our Fortune 50 customers such as Coca‑Cola, Linked In, Adobe, LVMH and Bayer to outpace their competition.

We champion a Winning Culture built on diversity of thought and values, a strategy‑led, values‑based, and disciplined approach to execution. Join us in building tomorrow’s secure systems.

Security at scale requires engineers who have built production software ’re looking for a senior engineer who has extensive shipping experience and now wants to focus that expertise on making our products more secure.

• Partner with engineering teams to embed security into product design from day one—not as a gate, but as a collaborator who understands the tradeoffs
• Lead threat modeling for new features and architectures, helping teams think like attackers while shipping with confidence
• Drive secure‑by‑default patterns across the organization—build the guardrails, tooling, and paved roads that make the secure path the easy path
• Own security assessments end‑to‑end: scoping, execution, findings, and working with teams through remediation
• Respond to and lead complex security incidents, coordinating cross‑functional response and turning incidents into lasting improvements
• Level up the team—mentor engineers across theki organization on secure development practices and help grow our security culture

• Strong software engineering foundation: 5+ years building production software (backend, full‑stack, or platform engineering). You’ve shipped real products and understand the pressures engineering teams face.
• Security depth through practice:
  You’ve developed security expertise organically—as a Security Champion, through leading secure design initiatives, building security tooling, or driving security improvements on your role. Formal security titles not required.
• Technical breadth:
  Solid understanding of modern infrastructure—cloud platforms (AWS, GCP, or Azure), containerization (Docker, Kubernetes), and secure development practices.
• Communication that lands:
  You can explain security risks to a PM, debate architecture tradeoffs with a principal engineer, and write docs that developers actually read.

• Experience with threat modeling frameworks and security design review processes at scale
• Background in penetration testing, vulnerability research, or red teaming
• Contributions to the security community (open source, bug bounty, research, talks)
• Advanced certifications (OSCP, CISSP, GWEB, GIAC)
• Experience with zero‑trust architectures, identity & access management, or cryptographic systems

This is an IC role with real scope. You will operate independently on complex, ambiguous problems, influence how product teams think about security, and help build a security program that developers actually want to work with.

We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce and drives business success. Build your career in a place where diversity, equity, inclusion, and belonging aren’t just words on paper—this is what drives our innovation and connects us.

We will ensure reasonable accommodation for individuals with disabilities. If you require accommodations, please contact us.

It has come to our attention that fraudulent and fictitious job opportunities are being circulated on the Internet. Prospective candidates are being contacted by certain individuals, mainly through telephone calls, emails and correspondence, claiming they are representatives of Anaplan. The main purpose of these correspondences and announcements is to obtain privileged information from individuals.

Anaplan does not extend offers to candidates without an extensive interview process with a member of our recruitment team and a hiring manager via video or in person. All offers are first extended verbally and then followed up in written communication. If you receive suspicious communication, contact  before taking any further action.

Seniority level:
Mid‑Senior level

Employment type:

Full‑time

Job function:
Information Technology

Industries: IT Services and IT Consulting