Security Design Engineer (Software & App Design)

Talent Smart Limited; Easter Howgate; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services client in Scotland seeks a Security Design Engineer to define secure software architecture across a critical platform. You will lead end-to-end solution design, collaborate with stakeholders, and ensure compliance with security controls. Candidates should have strong experience in software architecture and a background in operational and transformational security environments. This role offers the chance to influence senior stakeholders and shape the security landscape of the organization.

Qualifications

• Strong experience in software and solution architecture.
• Broad IT background with effective communication skills.
• Proven delivery in large-scale IT transformations.

Responsibilities

• Own and deliver secure solution designs.
• Define architecture patterns and design decisions.
• Collaborate with architects to ensure strategic alignment.

Skills

Software and solution architecture

System design and architecture patterns

Data modelling and entity relationship design

API design and system integration

Engagement with non-security SMEs

Experience in operational security environments

Experience in transformational security environments

Delivery within large-scale IT transformation programmes

Education

Degree in cybersecurity, computer science, or related field

CISSP, CISM, or equivalent security certification

SABSA or TOGAF certification

Tools

Check Point

Illumio

Fortinet

BizzDesign

Archi

Jira

Confluence

Job description

The Company

Superb opportunity to join a leading financial services client with offices in Edinburgh.

This is an initial 6-month contract inside IR35. There will be a requirement to be in the office up to 3-days per week.

The Role

We are looking for a Security Design Engineer to lead secure software and application design across a critical in-house platform. You will own end-to-end solution design, produce high-quality architecture artefacts, and provide technical leadership across delivery and transformation programmes.

The role

You will support and evolve an internally developed Unified Policy Portal (UPP) - a web application with an Azure-hosted data lake Back End used for Firewall rule recertification (Check Point, Illumio, Fortinet). The role includes designing new features to support WAF, network segmentation, and Proxy capabilities, as well as contributing to the re-platforming of the service onto new infrastructure.

Key responsibilities

• Own and deliver secure solution designs aligned to architecture standards and reference models
• Define architecture patterns, design decisions, risks, and deviations
• Collaborate with enterprise and solution architects to ensure strategic alignment
• Provide technical assurance and consultancy to engineering teams
• Present designs and recommendations to design authorities and senior stakeholders
• Ensure compliance with security controls and manage risk remediation
• Promote strong documentation, governance, and peer review practices

What you'll bring

• Strong experience in software and solution architecture, including:
  • System design and architecture patterns
  • Data modelling and entity relationship design
  • API design and system integration
• Broad IT background with the ability to engage confidently with non-security SMEs
• Experience across both operational and transformational security environments
• Proven delivery within large-scale IT transformation programmes
• Ability to represent security at technical and design authorities

Technology & tools

• Experience with Check Point, Illumio, Fortinet, or similar Firewall technologies
• Architecture modelling tools (BizzDesign, Archi, UML or equivalent)
• Jira for delivery tracking and Confluence for documentation

Qualifications (preferred)

• Degree in cybersecurity, computer science, software engineering, or related field
• CISSP, CISM, or equivalent security certification
• SABSA or TOGAF certification

This is a high-impact role offering the opportunity to shape secure application architecture, influence senior stakeholders, and drive meaningful improvements across a critical enterprise security platform.

More details available on successful application.