Cyber Security Engineer

Berkeley Square IT; London; On-site; GBP 150,000 - 200,000; Full time

Job summary

A leading digital security function in London is seeking a Cyber Security Engineer to enhance its Application Security capabilities. This role involves embedding automated security controls within CI/CD pipelines and conducting hands-on testing of cloud-based services. The ideal candidate will have a strong background in penetration testing, vulnerability assessments, and cloud security, along with relevant certifications.

Benefits

Expenses reimbursed when travelling away from base office

Qualifications

• Proven track record in pen testing and ethical hacking.
• Hands-on with security tools and deep understanding of secure cloud infrastructure.

Responsibilities

• Conduct penetration tests and security assessments on web apps and APIs.
• Review and optimise security automation tools within CI/CD workflows.
• Partner with developers to fix vulnerabilities.

Skills

Pen Testing

Vulnerability Assessments

Ethical Hacking

Secure Coding

Cloud Security

Scripting

Education

OSCP

CREST/TIGER

Tools

Burp Suite

ZAP

Nmap

Metasploit

Veracode

GitHub Advanced Security

Job description

Role: Cyber Security Engineer
Contract Duration: Until 1st October 2025
Rate: £700/day
Security Clearance: SC required
Expenses: Reimbursed when travelling away from base office

A leading digital security function is seeking an experienced Cyber Security Engineer to strengthen its Application Security (AppSec) capabilities. This role focuses on embedding automated security controls within CI/CD pipelines and delivering hands-on testing of cloud-based services.

Key Responsibilities:

• Conduct penetration tests and security assessments on web apps, APIs, and cloud platforms

• Review and optimise security automation tools within CI/CD workflows (SAST, DAST, IaC scanning, etc.)

• Partner with developers to fix vulnerabilities and champion secure coding

• Provide subject-matter expertise in cloud security (AWS, Azure, or GCP) and DevSecOps tooling

• Ensure security compliance across the development lifecycle, aligned with NCSC and industry standards

Required Experience:

• Proven track record in pen testing, vulnerability assessments, and ethical hacking

• Hands-on with tools such as Burp Suite, ZAP, Nmap, Metasploit

• Deep understanding of secure cloud infrastructure (AWS/Azure) and scripting (Python, Bash)

• Familiarity with DevSecOps tools (e.g. Veracode, GitHub Advanced Security)

• Certifications such as OSCP or CREST/TIGER

Bonus Skills:

• Experience within the CHECK scheme

• Knowledge of UK public sector security practices

• Exposure to threat modelling and secure system design