Lead Security Engineer - Hybrid/Remote with Equity

Ocho People; Belfast City District; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Share options

Hybrid/Remote Belfast

35 days annual leave inc stats

Enhanced pension scheme

Private health

Job summary

Ocho People is seeking a Lead Security Engineer to head security engineering and testing within a growing cyber security team in Belfast. You will set methodology, tooling and engagement scope, working with agile teams to embed security across the SDLC and advise clients directly.

You will lead penetration testing engagements, evolve testing outputs, review code for security, and mentor junior engineers to grow their skills while communicating complex concepts to non-technical audiences.

Qualifications

• Expertise securing web applications and cloud platforms (AWS/Azure).
• Hands-on experience with manual and automated security testing tools.
• Strong knowledge of security standards (NCSC, NIST, OWASP ASVS, GDPR, PCI).
• Familiarity with OWASP Top 10, XSS, SQL injection, MITM.
• Experience in Continuous Security, CI/CD practices.
• Ability to mentor and develop team members.
• Clear, non-technical client communication.

Responsibilities

• Lead security testing engagements on web apps, networks, and infra.
• Define and evolve security testing methodology and tooling.
• Review source code and embed security into CI/CD pipelines.
• Coach and develop a small security team and careers.
• Advise customers on security best practices for varied audiences.

Skills

Web app security

Cloud security

Security testing

Mentoring

Client advisory

CI/CD security

Tools

Burp Suite

OWASP-ZAP

Nmap

Nessus

Metasploit

Job description

Ocho People is seeking a Lead Security Engineer to head security engineering and testing within a growing cyber security team in Belfast. You will set methodology, tooling and engagement scope, working with agile teams to embed security across the SDLC and advise clients directly.

You will lead penetration testing engagements, evolve testing outputs, review code for security, and mentor junior engineers to grow their skills while communicating complex concepts to non-technical audiences.