Security Engineer — Web & Cloud Pentesting Expert

Sarah's Cool Company; City of Westminster; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

3 weeks paid time off

Health benefits

Company culture awards

Job summary

Sarah's Cool Company is seeking a Security Engineer to manage the security posture of our software and protect against threats. You will conduct penetration tests, secure cloud infrastructure, and oversee SOC II controls while coordinating with the security team.

Ideal candidates have 3+ years in penetration testing, strong Linux knowledge, and experience with Jira and Agile DevOps practices. This role emphasizes proactive risk management and collaboration with cross-functional teams.

Qualifications

• 3+ years of experience performing penetration testing against web applications.
• Experience securing cloud-based infrastructures and solutions.
• Previous experience on an information security team.
• Advanced knowledge of OWASP vulnerabilities and security best practices.
• Familiarity with SOC II controls and audits.
• Experience in other technical roles (SysAdmin, Helpdesk, etc.).
• Strong understanding of Linux server environments.

Responsibilities

• Conduct penetration tests against web applications and infrastructure.
• Validate security on new hardware and software infrastructure.
• Assist front-line company representatives with security questions.
• Manage firewall rules and internal pentesting.
• Manage SOC II controls and external pentesting.
• Prioritize work through Jira backlog.

Skills

Penetration testing

Cloud security

SOC II controls

Linux servers

Kanban/Agile DevOps

Security leadership

Scripting (Python/Perl/Ruby/PHP)

Education

CS/IT degree

Tools

Jira

Job description

Sarah's Cool Company is seeking a Security Engineer to manage the security posture of our software and protect against threats. You will conduct penetration tests, secure cloud infrastructure, and oversee SOC II controls while coordinating with the security team.

Ideal candidates have 3+ years in penetration testing, strong Linux knowledge, and experience with Jira and Agile DevOps practices. This role emphasizes proactive risk management and collaboration with cross-functional teams.