TESTQ Technologies
Security Lead
Sheffield
Posted about 13 hours ago
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Experience 7 to 11
Responsibilities
- Design and implement security controls across enterprise Identity and Access Management platforms
- Embed Secure by Design principles throughout solution design and delivery
- Implement and maintain Zero Trust security controls and architectures
- Configure and manage authentication and authorization security mechanisms
- Implement secure service-to-service communications using mTLS
- Support security controls for Human Workload and Agent Identities
- Develop and maintain Policy-as-Code solutions using OPA and related technologies
- Integrate secrets management, PKI certificate lifecycle management, and key management services
- Conduct security reviews of infrastructure applications and solution designs
- Perform threat modeling, risk assessments, and security architecture reviews
- Identify, assess, and remediate vulnerabilities across platforms and applications
- Support vulnerability management, security patching, and remediation activities
- Implement cloud security controls across GCP and Kubernetes environments
- Configure security monitoring, logging, and audit capabilities
- Support identity governance, privileged access management, and least-privilege access controls
- Collaborate with Security Operations and Incident Response teams during security events
- Support DevSecOps initiatives and automated security testing practices
- Produce security standards, hardening guides, implementation documentation, and operational procedures
- Ensure compliance with security governance and regulatory requirements
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
To be successful in this role you should have
- Strong Information Security Engineering experience
- Expertise in Identity and Access Management (IAM)
- Knowledge of Zero Trust Architecture and security models
- Strong understanding of Authentication and Authorization technologies
- Experience with Workload Identity and Agent Identity management
- Hands-on knowledge of PKI and Certificate Management
- Experience with Secrets Management platforms
- Strong understanding of Cryptography principles and key management
- Experience securing GCP cloud environments
- Knowledge of Kubernetes Security and container security controls
- Experience with Service Mesh Security and API Security
- Hands-on experience with Policy-as-Code tools such as OPA
- Strong DevSecOps and Secure SDLC experience
- Experience performing Threat Modeling and Security Assessments
- Expertise in Vulnerability Management and Security Remediation
- Experience with Security Monitoring, Logging, and SIEM platforms
- Knowledge of Security Compliance, Governance, and Risk Management
- Experience supporting Incident Response and Security Operations activities
- Strong stakeholder management and communication skills
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills
- Mandatory Skills: Application Security (application security framework/ threat modeling/ Secure SDLC/ DevSecOps/Application Security Architecture Review), Infra Vulnerability management/Triaging/ Remediation Advisory / ServiceNow /ITSM /CMDB
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Application Security
Threat Modelling
Secure SDLC
DevSecOps
Application Security Architecture Review
Infra Vulnerability Management
Identity And Access Management
Zero Trust Architecture
PKI And Certificate Management
GCP Cloud Security
Kubernetes Security
Policy As Code
OPA
Secrets Management
Service Mesh Security
API Security