Security Engineer

RevTech; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working: office-based to start,

Pension contributions

25 days' holiday

Job summary

RevTech in London is hiring a Security Engineer to join our development team. This hands-on role focuses on designing and coding security features, reporting to the Head of Security.

You will integrate security into CI/CD, perform SAST/DAST and dependency scanning, and model threats with the devs to fix vulnerabilities early.

Qualifications

• 3+ years in security engineering or software development with a security focus.
• Strong coding skills in at least one modern language.
• Solid AppSec: OWASP Top 10, secure coding, auth, encryption and API security.
• Able to explain risk clearly to technical and non-technical people.

Responsibilities

• Designing, building and shipping security features across the platform.
• Writing production code day to day as part of the dev team.
• Building security into CI/CD, from SAST/DAST to dependency scanning.
• Threat modelling new features and fixing vulnerabilities with the devs.

Skills

Security engineering

Coding skills

Risk communication

Tools

SAST/DAST

Job description

I'm working with an established, fast-growing B2B SaaS business in London that's hiring a Security Engineer to join their development team.

This is a hands-on build role, not a tool-running or box-ticking one. You'll design and code the security features yourself, reporting to the Head of Security.

What you'll be doing

• Designing, building and shipping security features across the platform
• Writing production code day to day as part of the dev team
• Building security into CI/CD, from SAST/DAST to dependency scanning
• Threat modelling new features and fixing vulnerabilities with the devs

What they're looking for

• 3+ years in security engineering, or software development with a security focus
• Strong coding skills in at least one modern language
• Solid AppSec: OWASP Top 10, secure coding, auth, encryption and API security
• Able to explain risk clearly to technical and non-technical people

What's on offer

• Bonus pool based on company performance
• Hybrid working: office-based to start, then moving to hybrid
• Pension contributions
• 25 days' holiday, rising with length of service