Lead Software Security Engineer

United States Digital Space LLC; Greater London; Hybrid; GBP 135,000 - 165,000; Full time

Benefits offered by this job

Pension scheme

Generous holiday allowance

Ongoing learning and professional development

Job summary

United States Digital Space LLC is seeking a Lead Software Security Engineer in London, offering an annual salary of up to £150,000. This hybrid role focuses on enhancing application and cloud security within a collaborative engineering culture.

The ideal candidate will help shape the security strategy, driving initiatives across various teams while ensuring secure development practices. Key benefits include a high level of autonomy, ongoing professional development, and a generous holiday allowance.

Qualifications

• Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer.
• Strong understanding of application security principles and secure software development practices.
• Hands-on experience securing cloud environments (AWS, GCP or Azure).

Responsibilities

• Driving application and product security initiatives across multiple engineering teams.
• Conducting security reviews, threat modelling and risk assessments.
• Implementing and improving vulnerability management processes.

Skills

Security Engineer

Application Security

DevSecOps

AWS

GCP

Azure

Vulnerability Management

Threat Modelling

CI/CD Security

Stakeholder Management

Job description

Lead Software Security Engineer

Salary: Up to £150,000 + Benefits

Location: London (Hybrid – 3 days per week in the office)

We are currently looking for a Lead Software Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Lead Security Engineer will play a pivotal role in shaping the organisation’s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.

This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.

The Opportunity

As the Lead Security Engineer, you’ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure‑by‑design culture across the business.

Key responsibilities include:

• Driving application and product security initiatives across multiple engineering teams
• Conducting security reviews, threat modelling and risk assessments
• Implementing and improving vulnerability management processes
• Embedding security tooling into CI/CD pipelines and development workflows
• Partnering with developers to promote secure coding practices
• Reviewing cloud infrastructure and architecture from a security perspective
• Supporting incident response and remediation activities when required
• Defining and promoting security standards, policies and best practices
• Influencing technical decision-making across engineering and leadership teams

This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.

What’s in it for you?

• Salary up to £150,000
• Hybrid working model
• Opportunity to work on cutting‑edge AI and technology products
• High level of autonomy and influence
• Collaborative engineering culture
• Career progression opportunities as the business continues to scale
• Ongoing learning and professional development
• Pension scheme
• Generous holiday allowance

Skills and Experience

• Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer
• Strong understanding of application security principles and secure software development practices
• Experience working closely with software engineering teams
• Hands‑on experience securing cloud environments (AWS, GCP or Azure)
• Experience with vulnerability management, threat modelling and security reviews
• Knowledge of CI/CD security and modern development practices
• Excellent stakeholder management and communication skills

Eligibility

Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.