Queen Square Recruitment
Lead Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Lead Engineer – Control Analyst
💰 £580/day (Inside IR35)
📍 Sheffield, UK (2 days onsite)
📅 12-Month Contract
Our client is looking for a highly experienced Cybersecurity SME / Consultant to join an Engineering Excellence & Enablement team within a major financial services environment. The role will focus on assessing and improving the cybersecurity maturity of engineering platforms, ensuring build systems, CI/CD pipelines, runtime infrastructure and developer tooling are secure by design.
Key Responsibilities
- Develop and maintain an Engineering Platform Cybersecurity Maturity Framework.
- Conduct security assessments across CI/CD, build systems, runtime infrastructure and developer tooling.
- Perform threat modelling, gap analysis and risk assessments to identify systemic security risks.
- Define secure architecture patterns, security baselines and policy-as-code controls.
- Partner with platform owners to address gaps around artifact integrity, access control and configuration security.
- Embed vulnerability management, SBOM, software provenance and code-signing practices.
- Develop security roadmaps based on business risk, regulatory requirements and operational priorities.
- Advise senior technology and cybersecurity stakeholders and translate technical risks into business impact.
- Represent cybersecurity within governance forums and drive adoption across engineering teams.
- Track maturity improvements and continuously evolve security frameworks and secure-by-design practices.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Skills & Experience
- Strong cybersecurity experience within large-scale regulated financial services or similarly complex environments.
- Deep understanding of engineering platforms, CI/CD, build systems, artifact repositories and developer tooling.
- Strong DevSecOps experience, including secure pipeline design and automated security controls.
- Knowledge of service mesh, cryptography, network security, application security, vulnerability and risk management.
- Proven experience with threat modelling, security assessments and gap analysis.
- Experience developing cybersecurity maturity models, frameworks and strategic roadmaps.
- Strong stakeholder management with the ability to influence senior technology leadership.
- Ability to translate complex technical security risks into clear business impact.
- Experience with cloud security (AWS/Azure/GCP) and Kubernetes is advantageous.
- Knowledge of SLSA, SBOM, software supply-chain security or secure developer tooling is highly desirable.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Please apply with your CV and we'll be in touch. Thanks!
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills