Senior Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in United Kingdom.

This role sits at the core of securing a complex, cloud-native cybersecurity platform used by enterprises and government organizations to detect and respond to real-world adversary activity. You will take full ownership of application and cloud security across a fast-moving engineering environment, directly shaping how security is embedded into products, infrastructure, and delivery pipelines. The position is highly hands-on, focused on building, implementing, and improving security controls rather than advising from the sidelines. You will work closely with engineering, DevOps, and product teams to ensure secure design, resilient architecture, and effective threat detection across AWS and Kubernetes environments. In addition, you will play a key role in compliance programs such as SOC 2 and ISO 27001 while supporting customer trust and audit processes. This is a leadership role with direct responsibility for mentoring a security engineer and acting as a technical escalation point for security incidents. The environment is fast-paced, mission-driven, and highly collaborative.

Accountabilities

• Own and continuously improve the security posture of the platform, with a strong emphasis on application security, cloud security, and secure software delivery. This includes both building security capabilities and embedding them directly into engineering workflows.
• Lead application security efforts across the product, including threat modeling, secure design reviews, and hands-on vulnerability remediation with engineering teams.
• Design, implement, and maintain secure SDLC practices by embedding security into CI/CD pipelines, including SAST, DAST, dependency scanning, and secrets detection.
• Build and manage security tooling and policy-as-code controls across Terraform/Terragrunt-based infrastructure pipelines.
• Identify, validate, prioritize, and remediate vulnerabilities across applications, APIs, cloud infrastructure, and third-party integrations.
• Own cloud security across AWS and Kubernetes, including IAM design, network security, encryption, logging, and configuration drift management.
• Develop and tune detection and response capabilities using tools such as CloudTrail, GuardDuty, and Security Hub, and lead security incident response activities.
• Drive SOC 2 and ISO 27001 compliance programs, including control design, audit coordination, and documentation ownership.
• Support customer trust initiatives by responding to security questionnaires and explaining technical controls during audits and evaluations.
• Manage and mentor an internal Security Engineer responsible for corporate IT, identity, and endpoint security.