Pulse Group
Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Staff Security Engineer (Contract) — Security Engineering
Location: UK, Remote/Hybrid
Contract: Inside IR35 | 3–6 months, bridging to a permanent role
Start: Immediate
About the Role
We're hiring on behalf of one of the UK's largest energy suppliers, into a Security Engineering team that runs security as a genuinely code first discipline. Cloud infrastructure, log pipelines, and detection tooling are all provisioned through Terraform, with click-ops treated as a last resort.
Enterprise Security operates across four specialist squads, and this role sits within Security Engineering: the team that owns cloud and application security infrastructure for the wider technology organisation.
You'll take full ownership of a quarterly workstream end to end — scoped directly with the Security Engineering Lead, then driven independently.
What You'll Do
- Own a full quarterly security engineering workstream, from scoping through to implementation
- Build and maintain Terraform modules for Wiz (CSPM/ASPM) and Cloudflare WAF, configured entirely as code
- Write Python automation to close gaps Terraform can't reach
- Review code and infrastructure changes for security issues before they reach production
- Drive threat modelling and security assessments across AWS and GCP
- Maintain Wiz Defend log ingestion across cloud and code sources
- Partner directly with engineering teams as an embedded security specialist
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We're Looking For
- Background in software engineering before moving into security (not a SOC or infrastructure-first route)
- Production-level Python, used to build automation rather than one-off scripts
- Production-level Terraform, comfortable owning security tooling as code
- Hands-on AWS and/or GCP experience (this is not a Microsoft/Azure environment)
- Exposure to CSPM/ASPM tooling; direct Wiz experience a strong plus
- Comfortable owning a workstream with minimal oversight
- Experience with code review, secure coding, or threat modelling in a live engineering environment
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Nice to Have
- Direct hands-on experience with Wiz CSPM, ASPM, or Wiz Defend
- Cloudflare WAF configuration experience
- Multi-cloud experience across AWS and GCP concurrently
Why This Role
Take real ownership immediately — a full quarterly workstream, not a ticket queue. Work directly with a technically excellent lead with 20 years in software engineering before moving into security. Every tool here is configured through Terraform if you hate click-ops, this is built for you. And this contract is designed as a genuine bridge into a permanent position.
Apply now or message us directly to discuss in confidence.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location