Security Engineer (Mid and Senior)

Octopus Energy Group; London; On-site; GBP 40,000 - 60,000; Full time

Job summary

Join a leading company as a Mid-Level or Senior Security Engineer to shape a sustainable energy future. You will work in a collaborative team, defining security practices, building innovative solutions, and contributing to various exciting projects while promoting a culture of autonomy and recognition.

Benefits

Competitive salary, tailored to experience

Unique culture with autonomy and innovation

Recognition and awards for top UK workplace

Perks and benefits at UK perks hub

Qualifications

• 2 years experience for Mid-Level; 4+ years for Senior.
• Strong security background and analytical skills required.
• Experience with cloud security tools and willingness to learn.

Responsibilities

• Build and maintain security tooling and infrastructure.
• Respond to security incidents and improve response processes.
• Work with teams to secure infrastructure, systems, and applications.

Skills

Web application security

Problem-solving

Analytical skills

Understanding of OWASP Top 10

Security tooling experience

Knowledge of MITRE ATT&CK

Education

Security certifications

Cloud provider certifications

Security qualifications or degrees

Tools

WAFs

SAST

DAST

EDR tools

CSPM

CNAPP

Job description

Help us use technology to make a big green dent in the universe! It’s an exciting time in energy. Join us to shape a sustainable future.

We are building a small, efficient Cyber and Information Security team at Octopus Energy Group.

We're hiring Mid-Level and Senior Security Engineers. We seek ambitious, knowledgeable, and experienced Security Engineers to grow with us and ensure our security practices evolve with our company.

You will help define Security at Octopus Energy Group, supporting our employees, building security solutions, and leading organizational change.

This is a creative, collaborative, full-time role in a Cloud-First organization. If you’re passionate about Cloud technologies and security by design, apply!

We are looking for Security Engineers with at least 2 years of relevant experience, and Senior Security Engineers with 4+ years.

What you'll do:

• Build and maintain security tooling and infrastructure
• Respond to security incidents and improve response processes
• Work with teams to secure infrastructure, systems, and applications
• Develop secure coding practices and guide development teams
• Stay updated on security trends and evaluate their impact
• Maintain security documentation like policies and procedures

This role offers opportunities to engage in various security projects and initiatives, encouraging new challenges and collaboration across teams.

What you'll have:

• Strong security and technology background
• Understanding of web application security, OWASP Top 10, and testing tools
• Experience with security tools like WAFs, SAST/DAST
• Experience with endpoint (EDR, ZTNA) and cloud (CSPM, CNAPP) security tools
• Good AWS experience or knowledge, with willingness to learn Azure or GCP
• Strong analytical and problem-solving skills

Experience in some of these areas is sufficient; expertise in all is not expected.

What will help:

• Security certifications
• Cloud provider certifications
• Security qualifications or degrees
• Experience with documentation and logging tools
• Knowledge of MITRE ATT&CK framework

Why you'll love it here:

• Competitive salary, tailored to your experience
• Unique culture with autonomy and innovation
• Recognition and awards, including top UK workplace
• Perks and benefits at our UK perks hub

Our process takes up to 4 weeks, with support from our recruitment team. Questions? Contact us at [e-mail].

If this sounds like you, we’d love to hear from you.

We support all candidates, including those requiring accommodations. We value diversity, honesty, and empathy. We are an equal opportunity employer committed to inclusion and fairness.