SC Cleared Senior Security Engineer - Cloud Security

Sanderson Government & Defence; Greater London; On-site; GBP 77,000 - 129,000; Full time

Job summary

Sanderson Government & Defence is seeking a Senior Security Engineer to own end-to-end security for government projects. You will embed security into delivery pipelines and build automation that keeps complex services secure by default.

You will raise the bar on engineering practices, shaping patterns and tooling across AWS, Azure, or GCP environments, and supporting threat modelling, vulnerability management, and incident response with a security-first mindset.

Qualifications

• Strong hands-on experience securing cloud infrastructure in AWS, Azure, or GCP.
• Experience embedding security tooling into CI/CD pipelines (SAST, DAST, SCA, container/IaC scanning).
• Proficiency in at least one scripting/programming language (Python, Go, or similar) for building security automation and tooling.
• Experience with detection engineering, creating and managing data streams (Cribl, Kinesis) and SIEM tooling (Splunk, QRadar, Sentinel, ArcSight).
• Experience setting up segregated and secured hypervisor environments for testing potentially malicious software or code.

Responsibilities

• Build secure architectures for cloud-native systems—apply secure-by-design patterns, zero-trust, least-privilege access.
• Embed security into CI/CD pipelines, integrating SAST/DAST/SCA and IaC scanning.
• Support threat modelling and design reviews with engineering teams using STRIDE and MITRE ATT&CK.
• Build and maintain security tooling and automation from policy-as-code and IaC guardrails.
• Support vulnerability management and incident response readiness; triage findings and improve playbooks.
• Contribute to client engagements by surfacing architectural security recommendations.
• Mentor engineers on secure coding and secure design through pairing and reviews.

Skills

Cloud security

CI/CD security tooling

Scripting

Detection engineering

Hypervisor security

Tools

Terraform

OPA/Conftest

Splunk

QRadar

Sentinel

Job description

Sanderson Government & Defence is seeking a Senior Security Engineer to own end-to-end security for government projects. You will embed security into delivery pipelines and build automation that keeps complex services secure by default.

You will raise the bar on engineering practices, shaping patterns and tooling across AWS, Azure, or GCP environments, and supporting threat modelling, vulnerability management, and incident response with a security-first mindset.