Developer Enablement & Partnership

• Proactively identify security knowledge and capability gaps, and build confidence across Phorest engineering through collaborative threat-modelling sessions, documentation, and hands-on pairing, so teams can make good security decisions independently.
• Embed with stream-aligned product teams at key stages like design, architecture review, pre-launch to provide security input as a trusted peer, not an external auditor. Coach teams through complex security decisions, helping them build their own capability.
• Act as a subject matter expert and trusted partner between Security and Product & Engineering, helping teams understand security and compliance requirements.
• Share security learnings, emerging threats and lessons from incidents across Engineering, creating reusable guidance that raises the baseline of secure engineering and proactively creates awareness for how teams consider security.

Security Monitoring & Risk Understanding

• Work alongside the broader security and IT team to proactively monitor security signals and alerts, identify patterns and build shared situational awareness across the team.
• Identify and assess emerging security risks and opportunities, conduct exploratory risk analysis that shapes the security programme roadmap, bringing in the engineering perspective you've built through close team relationships.
• Build out security requirements and review processes for our AWS-hosted, multi-tenant SaaS environment.
• Contribute to the on-call rota, providing security coverage for incidents as they arise.
• Support security incident response end to end, from initial triage and containment through to post-incident review and remediation tracking.

Who You Are

You take initiative.

We’re looking for someone that creates momentum over responding to demand, we need someone who sees a risk or an opportunity, develops a point of view, and moves, keeping stakeholders informed along the way. You are comfortable defining the problem, deciding your approach and owning the outcome.

You can bridge technical and non-technical worlds.

Phorest's engineering teams are sharp and want genuine security partnership, but not everyone in the company is technical, so you will need to be credible with both explaining risk clearly to technical and non technical audiences, and translating security requirements into practical engineering guidance.

You have a proactive growth mindset.

You seek feedback, challenge the status quo, embrace ambiguity and turn what you learn into action — sharing knowledge and raising the capability of those around you.

You are technically grounded.

• Demonstrable Hands-on secure development experience (preferably 7+ years); you have written production code at some point in your career.
• Deep enough experience in a security engineering or application security role to act as a subject matter expert for complex security challenges.
• Comfortable using AI tools to accelerate security work, generating, and analysing at pace while keeping your human judgment at the center of every decision.
• Strong working knowledge of AWS security, IAM, GuardDuty, Security Hub, WAF, and related services.
• Familiarity with common vulnerability classes, OWASP, and secure SDLC frameworks.
• Comfortable working across SaaS, multi-tenant architectures.

You bring the soft skills.

• Strong communicator, written, verbal, and async.
• Able to build trust with engineering teams without relying on authority.
• Proactive in keeping stakeholders informed; you surface problems early rather than waiting to have answers.
• Comfortable working in a distributed team where you own outcomes end to end.

NICE TO HAVE

• Experience working in a payments or regulated SaaS environment (PCI DSS, GDPR, HIPAA).
• Familiarity with Team Topologies or other platform/enabling team models.
• Exposure to offensive security techniques, penetration testing, red teaming, or bug bounty.
• Experience building security enablement or champion programmes that improve security capability and ownership across an engineering organisation.

Benefits

• 🧘 Your wellbeing is important to us - we provide private healthcare, 2 Wellness Days, an employee assistance program and a free online GP service.
• 💰 As part of our Financial Wellbeing, we provide competitive Compensation, an Employee Share Purchase Scheme, Pension, Life Assurance, and Income Protection.
• 🚵🏿 We help you travel by providing a bike to work scheme as well as tax saver transport tickets.
• 🦸‍♀️ We support the women who work in Phorest by offering 2 weeks leave for Fertility Treatment, Pregnancy Loss and Menopause.
• 🍼 We care for your family and provide Enhanced Maternity and Paternity Benefits.
• 🌳 We grow our own timber! We provide a great learning environment and extensive development opportunities. We run development programs and provide access to many online resources including LinkedIn learning.
• 🏠 Moving house? Phorest employees get 3 moving days.

Want to learn more about Phorest? Check out nothingventured.rocks for our blog and Insights on building an evergreen company from the team here at Phorest.

Phorest is an equal opportunity employer. For this position, flexi-time and working from home is possible. We are also open to remote work. Get in touch to ask for more information or to chat about your future with Phorest!

Research shows that while men apply to jobs when they meet an average of 60% of the criteria, women and other marginalised folks tend to only apply when they check every box. So if you think you have what it takes, but don't necessarily meet every single point on the job description, please still get in touch. We'd love to have a chat and see if you could be a great fit.