Security Engineer - Cloud Security, Automation & AI

Baillie Gifford; City of Edinburgh; On-site; GBP 70,000 - 110,000; Full time

Job summary

Baillie Gifford is inviting applications for the Security Engineer role in Edinburgh. You will design, build and maintain security capabilities across cloud, identity, endpoints and vulnerability management, with emphasis on automation and secure-by-default design.

You will partner with Infrastructure, DevOps and security teams to embed security earlier in the development lifecycle, maturing existing investments and enabling safe, scalable delivery.

Qualifications

• Practical experience in Cybersecurity or related technical field.
• Cloud security with Azure and Windows/Linux environments.
• Experience integrating security controls into CI/CD and deployments.

Responsibilities

• Design and maintain security platforms and controls across XDR, SIEM, SOAR, cloud security, and vulnerability management.
• Develop security tooling, integrations and automation via APIs, scripting and SOAR.
• Support identity security, privileged access and secrets management integrations.
• Assist AI adoption securely by defining guardrails and risk controls.
• Improve cloud security posture and CI/CD integration of security testing.
• Contribute to security architecture, design reviews and threat modelling.
• Develop security orchestration and data flows for operations and incident response.
• Test and validate controls via configuration testing and attack simulations.
• Produce documentation and share knowledge with the wider team.

Skills

Data literacy

Digital effectiveness

Improvement mindset

Systems thinking

Team working

Tools

CrowdStrike

SIEM

SOAR

Terraform

PowerShell

Python

Bash

Job description

Baillie Gifford is inviting applications for the Security Engineer role in Edinburgh. You will design, build and maintain security capabilities across cloud, identity, endpoints and vulnerability management, with emphasis on automation and secure-by-default design.

You will partner with Infrastructure, DevOps and security teams to embed security earlier in the development lifecycle, maturing existing investments and enabling safe, scalable delivery.