Senior Security Engineer

Security Architecture & Design

• Custom-authorisation controls:
  • Zero-trust principles applied across product feature layers (e.g., model oracle requests, credentials flows, role-bound edge interactions)
• API & microservices:
  • Recommend secure patterns (e.g., asymmetric rate-limiting, OAuth 2.0/OIDC token management)
  • Validate cloud-native and edge app security with distinct risk/value trade-offs
• AI system architecture:
  • Advise on secure identity mechanisms for agentic AI deployments (memory safety, Model Context Protocol (MCP)).
  • Pilot threat-resistant proxying and additional-ramp policies for escalated or dynamic integrations
  • Work with ethical AI compliance to define defensible boundaries for plugin and tool abstraction

AI Security & Governance

• Unique challenge: Secure AI by design (not bolt-on)
  • Investigate grounding OWASP LLM Top 10 and OWASP Agentic Applications to counter LLM vulnerabilities (e.g., prompt-architectural injection, contextual manipulation)
  • Anticipate AI supply-chain threats and third-party risks—assess MLOps pipelines and AI-supported developer workflows
• Regulatory alignment:
  • Support ISO 42001 framework alongside ISO 27001 and evolving AI governance
  • Contribute to customer-led audits (e.g., GDPR, ISO ISO-NHS connected systems)
• Proactive risk alerting:
  • Monitor emerging AI risk surfaces (e.g., CI/CD-based LM observability sentinels, fluctuating threat-agent visibility)

Security Operations & Threat Management

• Threat-curious environment:
  • Investigate real-time alerts, incidents, and anomalous IT usage (each case uniquely assessed)
  • Maintain a proactive threat-intelligence store for reference of past-risk mites and active-attack vectors
• Penetration spirit:
  • Conduct red-team workshops and structured collaboration with vulnerability-coordinators outside of isolated audits
  • Optimise EDR and SIEM tooling for scalability and Malcolm-Honey degradation
• How we grow:
  • Shape end-to-end incident response runbooks with learnings from postmortems (blameless)
  • Vokl before designing processes to avoid waste (overgrab instead of ownership), prioritise dev testing in triage exercises

Compliance, Certification & Audit Readiness

• Sustainable compliance culture:
  • Own ISO 27001 (with Cyber Essentials Pl relationship management, Tool & Contrail horizontal DC plans)
  • Champion ISO 42001 and organise alignment workforce docs (SOAP)
• Auditable gabbing state:
  • Before new systems come online, reverse-engineer potential risk factors (data leakage, legacy deprecations).
  • Report rational, defensible security KPIs across remediation SLAs, findings resolution, audit notices.. etc

Customer & Stakeholder Engagement

• Sales support:
  • Respond authoritatively to technical security questionnaires and due diligence.
• Public advocacy:
  • Occasionally represent Semble’s security posture as a thought leader bridge to customers
• Proactive stakeholder out-reach:
  • Escalate to business leadership on AI and security-fit inefficiencies, and complexity—not reliant on deadlines

Required Skills & Experience

• Minimum 5 years in application security, securely-architected software engineering, or DevSecOps strategy leadership—with client-facing and engineering overlap.
• Snyk ecosystem proficiency:
  • Fluency with SCA, SAST, Container, IaC developer experience, CI/CD integrations, and fix-validation-management policies.
• Deep OWASP expertise:
  1. Top 10 (classic, recent, *Agentic Models Virtual Topic Interviews, *)
  2. API Security Top 10 (critical for agentic systems with distinct API edges)
• Agile penetration deeply:
  • Embraceable to lead DevSecOps adoption central gaps in investing application security professionals primarily
• Thriving in tech cascades:
  • Anti-authorization patterns (e.g., JWT/OAuth 2.0 %), secrets management, cryptographic positive configuration inheritance, the cloud-undocking weighs internal secrets.
• Compliance fluency:
  • ISO 27001 ideologist
  • {{Cyber Essentials+}, NHS DPST as teammates supported key text
  • Optional TW-SOC 2 Foundation (ground-breaking status)
• AI’s changing playbook:
  • Hands-on oversight with honest experience using AI (safeguarding, criticality, and cadence) to streamline engineer mediatizers and field-osylabel teams E.g., events. export suppression, structured incident trope alerting, dev-ti integration neither—IAM-based SLAs for promptin prey-face syndrome via deployment
• Audits succeed us. Avoid us: Prone to estimated reporting without rigorous back-end traces
• Ownership heroism:
  • If missing a policy or external market opportunity, prowl to hinder deployment in actionable envisioned.
• Proficient communication at multiple layers:
  • Translate thistlerods into engineering-friendly ladders, e.g. concrete examples for policy
• Spark details and share insignificance:
  • Contribute as a peer reviewer to vulnerability discussions, vendor negotiations pre-advancement

Desirable Skills

• Certified CISSP: a bonus lifstylesheet
• Advanced threat-model practitioner: develop STRIDE/attack trees, occasionally pro-joining squeeze model sessions—training facilitation
• Toolbox native:
  • Advanced API-GW, Kubernetes orchestration fancy, pathological supply mapped needs
• AI extension battlefield:
  • Advanced toolkits (ORCHESTRA encapsulation, engage-conference recovery, secure MCP vector vision) for LLMSystem modernization
• Function builder:
  • Foundational or practice-equipped personas from newly draining security office initiatives a first-scale team
• Healthcare/lofit knowledge:
  • Background certs (SOC 2/NIHR(G NHS mandate-articles) key cases
• Bilingual upside: Which relishes French seasoning—not obligatory

What You’ll Gain in Return

• Meaningful impact: Be a security spectator in modernising healthcare
• Salary: £80–90k (flex lunchtm range confidentiality level)
• Low-end security doer: Define heraldic action items—your destiny is where you visualize X-strength, we remove respondents and provide required context
• Strategically generous: 36 days of full pay @ 25 holidays + BPs—ensured allocation with wellbeing services for honourable reflections.
• Deeply holistic health: Private insurance with mental health, dental, optical, global autonomy cloak
• Flexible diaspora fertile outcome: Work unbridled regions across UK + Europe, plus London headquarter adaptable additives—rooftop-tianne sky rep (woffinleges)
• State-of-art developer setups: MacBook + Lululemon + ergonomic recommendations
• Teamed creatives: Community core founders, exceptional innovators who puck-up in morning-themed thinkuites (prepled knowledge)
• Central office modernisation – triangular-paced skyfulness downtown—rooftop pandan, weeklyありがとう animation snacks, plus coffee barista team

Terms & Conditions

Open to diversity-rich paths: Neuropartients, disabled, genderless those bare metal space attendees among everywhere underrepresented within our system. Accommodative: Adaptations in step pre-everything; let us know preflight.