Security Engineer

Copello; Uxbridge; Hybrid; GBP 85,000 - 120,000; Full time

Job summary

Copello is recruiting a Senior Software Cybersecurity Engineer to join a high-growth technology organisation in Uxbridge, operating in a hybrid model. The role covers Product Security, AppSec, Cloud, Kubernetes and DevSecOps, with responsibilities spanning secure SDLC integration, threat modelling and secure architecture across AWS/Azure/GCP.

The candidate will bring 7+ years in Cybersecurity/AppSec, hands-on SAST/DAST/SCA, and strong knowledge of OWASP, NIST, ISO 27001 and CIS frameworks.

Qualifications

• 7+ years' Cybersecurity / AppSec / Security Engineering experience.
• Hands-on SAST / DAST / SCA / vulnerability management.
• Threat modelling experience (STRIDE / PASTA).
• Desirable: vulnerability research, exploit development, penetration testing, Splunk/OSQuery, AI/ML security & security certifications.

Responsibilities

• Embed security across the SDLC & CI/CD pipelines.
• Threat modelling, risk assessments & security architecture.
• Secure cloud platforms (AWS/Azure/GCP), Kubernetes & containers.
• Implement SAST, DAST, SCA, SBOM & secret scanning.
• Vulnerability triage, validation, remediation & PoC development.
• Security code reviews & secure-by-design guidance.
• Detection engineering, automation & incident response.
• Develop security standards, processes & technical runbooks.

Skills

Cloud security

Kubernetes security

DevSecOps

Threat modelling

Go

C#

OWASP

NIST

ISO 27001

CIS

AWS

Azure

GCP

Job description

Senior Software Cybersecurity Engineer - Uxbridge (Hybrid)

I'm recruiting for a Senior Software Cybersecurity Engineer to join a high-growth technology organisation, working across Product Security, AppSec, Cloud, Kubernetes and DevSecOps.

What you'll be doing:

• Embed security across the SDLC & CI/CD pipelines
• Threat modelling, risk assessments & security architecture
• Secure AWS/Azure/GCP, Kubernetes & containers
• Implement SAST, DAST, SCA, SBOM & secret scanning
• Vulnerability triage, validation, remediation & PoC development
• Security code reviews & secure-by-design guidance
• Detection engineering, automation & incident response
• Develop security standards, processes & technical runbooks

What we're looking for:

• 7+ years' Cybersecurity / AppSec / Security Engineering experience
• Strong Cloud + Kubernetes security experience
• Proven DevSecOps / CI/CD background
• Hands-on SAST / DAST / SCA / vulnerability management
• Threat modelling experience (STRIDE / PASTA)
• Development experience with Go and/or C#
• Strong OWASP / NIST / ISO 27001 / CIS knowledge
• AWS, Azure or GCP experience

Desirable:

• Vulnerability research, exploit development, penetration testing, Splunk/OSQuery, AI/ML security & security certifications.

A genuinely hands-on Product Security role for someone who wants to work at the intersection of software, cloud and cybersecurity.