Cybersecurity Lead Engineer

Gazelle Global; Sheffield; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Gazelle Global in Sheffield is seeking a Senior Cybersecurity Lead Engineer to strengthen security across large-scale engineering platforms within a highly regulated financial environment. You will lead security initiatives, develop maturity frameworks and embed secure-by-design practices.

The role is hybrid in Sheffield for a 12-month contract, focusing on DevSecOps, threat modelling and cloud security. You will collaborate with platform owners and senior stakeholders to drive risk-informed

Qualifications

• Extensive cybersecurity experience in large-scale engineering platforms.
• Experience with cloud security across AWS, Azure or GCP and Kubernetes.
• Knowledge of cryptography, network/application security and vulnerability management.

Responsibilities

• Develop and maintain cybersecurity maturity frameworks for engineering platforms.
• Conduct security assessments across CI/CD, build systems, runtime infrastructure and developer tooling.
• Perform threat modelling, gap analysis and risk assessments.
• Define secure architecture patterns, security baselines and automated controls.
• Embed DevSecOps, vulnerability management, SBOM, provenance and code-signing practices.
• Build security roadmaps and remediate critical risks with platform owners.
• Advise senior stakeholders on technical risk and business impact.
• Track maturity improvements and drive secure-by-design practices.
• Provide strong leadership in a regulated environment.

Skills

Cybersecurity expertise

DevSecOps

Threat modelling

Security assessments

Stakeholder management

Tools

Kubernetes

AWS/Azure/GCP

CI/CD tooling

Job description

Cybersecurity Lead Engineer | Sheffield | Hybrid | 12-Month Contract

We’re looking for a senior Cybersecurity Lead Engineer to strengthen cybersecurity across large-scale engineering platforms within a highly regulated financial environment.

Key responsibilities:

• Develop and maintain cybersecurity maturity frameworks for engineering platforms.
• Conduct security assessments across CI/CD, build systems, runtime infrastructure and developer tooling.
• Perform threat modelling, gap analysis and risk assessments.
• Define secure architecture patterns, security baselines and automated controls.
• Embed DevSecOps, vulnerability management, SBOM, provenance and code-signing practices.
• Build security roadmaps and work with platform owners to remediate critical risks.
• Advise senior technology and cybersecurity stakeholders on technical risk and business impact.
• Track maturity improvements and drive secure-by-design engineering practices.
• Strong cybersecurity experience in complex enterprise or regulated environments.
• Deep knowledge of engineering platforms, CI/CD and DevSecOps.
• Experience with cloud security across AWS, Azure or GCP and Kubernetes.
• Strong knowledge of cryptography, network/application security and vulnerability management.
• Threat modelling, security assessments and maturity frameworks.
• Excellent stakeholder management and communication skills.
• CISSP, CISM, CCSP, CCSK or equivalent advantageous.

Location: Sheffield, hybrid