Lead Engineer

Queen Square Recruitment; Sheffield; On-site; GBP 85,000 - 125,000; Full time

Job summary

Queen Square Recruitment is seeking a highly experienced Cybersecurity SME/Consultant to join an Engineering Excellence & Enablement team within a major financial services environment. The role will focus on assessing and improving the cybersecurity maturity of engineering platforms, ensuring build systems, CI/CD pipelines, runtime infrastructure and developer tooling are secure by design.

You will develop security roadmaps, conduct threat modelling and risk assessments, define secure

Responsibilities

• Develop and maintain an Engineering Platform Cybersecurity Maturity Framework.
• Conduct security assessments across CI/CD, build systems, runtime infrastructure and developer tooling.
• Perform threat modelling, gap analysis and risk assessments.
• Define secure architecture patterns, security baselines and policy-as-code controls.
• Partner with platform owners to address gaps around artifact integrity, access control and configuration security.
• Embed vulnerability management, SBOM, software provenance and code-signing practices.
• Develop security roadmaps based on business risk, regulatory requirements and operational priorities.
• Advise senior technology and cybersecurity stakeholders and translate technical risks into business impact.
• Represent cybersecurity within governance forums and drive adoption across engineering teams.
• Track maturity improvements and evolve security frameworks and secure-by-design practices.
• Strong cybersecurity experience within large-scale regulated financial services or similarly complex environments.
• Deep understanding of engineering platforms, CI/CD, build systems, artifact repositories and developer tooling.
• Strong DevSecOps experience, including secure pipeline design and automated security controls.
• Knowledge of service mesh, cryptography, network security, application security, vulnerability and risk management.
• Proven experience with threat modelling, security assessments and gap analysis.
• Experience developing cybersecurity maturity models, frameworks and strategic roadmaps.
• Strong stakeholder management with the ability to influence senior technology leadership.
• Ability to translate complex technical security risks into clear business impact.
• Experience with cloud security (AWS/Azure/GCP) and Kubernetes is advantageous.
• Knowledge of SBOM, software supply-chain security or secure developer tooling is highly desirable.

Skills

Cybersecurity

DevSecOps

Threat modelling

Security assessments

Policy-as-code

Cloud security

Kubernetes

Secure by design

Job description

Our client is looking for a highly experienced Cybersecurity SME / Consultant to join an Engineering Excellence & Enablement team within a major financial services environment. The role will focus on assessing and improving the cybersecurity maturity of engineering platforms, ensuring build systems, CI/CD pipelines, runtime infrastructure and developer tooling are secure by design.

Key Responsibilities

• Develop and maintain an Engineering Platform Cybersecurity Maturity Framework.
• Conduct security assessments across CI/CD, build systems, runtime infrastructure and developer tooling.
• Perform threat modelling, gap analysis and risk assessments to identify systemic security risks.
• Define secure architecture patterns, security baselines and policy-as-code controls.
• Partner with platform owners to address gaps around artifact integrity, access control and configuration security.
• Embed vulnerability management, SBOM, software provenance and code-signing practices.
• Develop security roadmaps based on business risk, regulatory requirements and operational priorities.
• Advise senior technology and cybersecurity stakeholders and translate technical risks into business impact.
• Represent cybersecurity within governance forums and drive adoption across engineering teams.
• Track maturity improvements and continuously evolve security frameworks and secure-by-design practices.
• Strong cybersecurity experience within large-scale regulated financial services or similarly complex environments.
• Deep understanding of engineering platforms, CI/CD, build systems, artifact repositories and developer tooling.
• Strong DevSecOps experience, including secure pipeline design and automated security controls.
• Knowledge of service mesh, cryptography, network security, application security, vulnerability and risk management.
• Proven experience with threat modelling, security assessments and gap analysis.
• Experience developing cybersecurity maturity models, frameworks and strategic roadmaps.
• Strong stakeholder management with the ability to influence senior technology leadership.
• Ability to translate complex technical security risks into clear business impact.
• Experience with cloud security (AWS/Azure/GCP) and Kubernetes is advantageous.
• Knowledge of SLSA, SBOM, software supply-chain security or secure developer tooling is highly desirable.