Lead Security Engineer

Hackajob Ltd; Birmingham; On-site; GBP 90,000 - 110,000; Full time

Job summary

Kainos in the United Kingdom is seeking a Lead Security Engineer (Consultant) to head security engineering and testing across our platforms and services. You will drive secure development practices and coordinate with delivery teams to embed security early.

The role requires expert knowledge of web app and cloud security, active clearance, and the ability to mentor juniors while communicating complex risks to diverse audiences across the business.

Qualifications

• Expertise in securing web applications and cloud platforms.
• Experience in the defence sector.
• Active security clearance.
• Experience with security testing both manual and automated tools.
• Familiarity with OWASP Top 10 and threat modelling.

Responsibilities

• Lead security engineering and testing across Kainos Platforms and Services.
• Set direction on security testing methodology, engagement scoping, outputs, and tool and technology selections.
• Develop junior security engineers.
• Work with agile delivery teams to develop good security practices throughout the software development journey.
• Share knowledge and help educate our customers and Kainos team members on good security practices.
• Coach and develop a small team, focusing on performance and career development.

Skills

Security leadership

Security testing

Threat modelling

Mentoring staff

Agile experience

Excellent communication

Tools

Burp Suite

OWASP-ZAP

NMAP

Nessus

Kali Linux

Metasploit

Job description

Salary: £100,000 - 100,000 per year

Requirements:

• Expertise in securing web applications and cloud platforms such as AWS and Azure.
• Experience in the defence sector.
• Current, active security clearance.
• Expertise in testing software and infrastructure security using manual or automated security tools, including performing and documenting penetration tests on web-based applications, networks, and computer systems.
• Expertise in assessing software and infrastructure source code from a security standpoint.
• Expertise in continuous security, continuous integration, and continuous delivery techniques.
• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, and SOC2.
• Knowledge of typical cyber security attack vectors such as OWASP Top 10, SQL, XSS, XXE, and MITM, with the ability to articulate threats and risks via threat modelling exercises and workshops.
• Excellent communication skills, with the ability to convey security complexities to audiences of various technical abilities.
• Demonstrated ability to manage, mentor, and coach team members and wider community.
• Good programming or scripting experience across Windows, Linux, and MacOS.
• Ability to stay up to date with new threats and attack types.
• Penetration testing qualifications such as OSCP, CREST, TIGER, or equivalent are desirable.
• Experience working with external penetration test companies to translate report findings into actionable tasks is desirable.
• Experience with security tools such as Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, and Metasploit is desirable.
• Knowledge of main cyber security areas such as OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots, IDS/IPS/WAF/AV/DLP, cryptography/PKI, IoT threats, and malware is desirable.
• Active participation in knowledge sharing activities and the security community is desirable.
• Experience of working in an agile environment is desirable.

Responsibilities:

• Lead our security engineering and security testing efforts across Kainos Platforms and Services.
• Set direction on our security testing methodology, engagement scoping, outputs, and tool and technology selections.
• Develop junior security engineers.
• Work with agile delivery teams to develop good security practices throughout the software development journey.
• Share knowledge and help educate our customers and Kainos team members on good security practices.
• Manage, coach, and develop a small number of staff, with a focus on employee performance and career development.
• Provide direction and leadership for the team while solving challenging problems together.

Technologies:

• AWS
• Azure
• Cloud
• Cryptography
• IoT
• Support
• Linux
• macOS
• Network
• OWASP
• SQL
• Security
• WAF
• Web
• Windows

More:

We are Kainos, a people-first company driven by problem solving, innovation, and collaboration, with a mission to create real impact through digital services and cutting-edge Workday solutions. We offer a diverse and ambitious team environment where creativity is valued and growth is supported. This role is for a Lead Security Engineer (Consultant) focused on our security engineering and security testing efforts across Kainos Platforms and Services. We are committed to diversity, equity, and inclusion, and we support candidates who may need accommodations or adjustments during the recruitment process.

last updated 36 week of 2026