Security Engineering Lead

PHET Enterprise Services (AP) Limited, Philippines Regional Operating Headquarters; England; On-site; GBP 120,000 - 170,000; Full time

Job summary

DXC Technology is seeking a Security Engineering Lead to drive secure architectures and governance across cloud and hybrid environments. The role demands hands-on guidance, risk management, and collaboration with accreditors and leadership to meet strict security standards.

Eligible candidates will have CISSP or CISM and cloud security certifications, with a strong foundation in cryptographic risk and national security compliance. This position is onsite in Hampshire.

Qualifications

• Experience in cybersecurity and secure systems architecture.
• Knowledge of accreditors, NCSC guidelines, and cryptographic risk.
• Senior security leadership with stakeholder engagement.

Responsibilities

• Security Architecture: design and implement security controls across cloud and hybrid environments.
• DevSecOps Integration: embed automated security scanning into pipelines.
• Risk & Governance: collaborate on risk management and approvals.
• Technical Guidance: mentor engineers on secure coding and incident response.
• Deep knowledge of IAM, encryption, and zero-trust architectures.
• Hands-on cloud security posture management (AWS/Azure) and IaC security tools.

Skills

Security Architecture

DevSecOps

Risk Management

Technical Leadership

Cloud Security

IaC Security

Zero Trust

Secure Networking

Cryptography

Education

Cyber or IT NVQ Level 4 or equivalent higher education

Degree in Information Security or Computer Science

Tools

SAST

DAST

SCA

IaC Security Tools

Job description

Job Description: DXC Technology is committed to building diverse, inclusive teams. We welcome applications from all backgrounds and particularly encourage interest from women, underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone.

Location and Eligibility

Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

Key Responsibilities

• Security Architecture: Lead the design and implementation of robust security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures.
• DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines.
• Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk management frameworks.
• Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness.
• Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures.
• Hands-on experience with cloud security postures (AWS / Azure) Proficiency in infrastructure-as-code (IaC) security and automated vulnerability management tools.
• Authoritative yet collaborative communication style when engaging technical teams and military stakeholders.
• Decisive problem-solving capability under high-pressure compliance deadlines.
• Uncompromising commitment to data protection and national security standards.

What you'll bring

Experience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging accreditors, NCSC guidelines, and cryptographic risk frameworks.

Education & Foundational Benchmark

Cyber or IT NVQ Level 4 or equivalent higher education / degree in Information Security or Computer Science.

Professional Certifications

Mandatory senior security certification: CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager); supplementary cloud security certification (e.g. CCSP, AWS/Azure Solutions Architect / Security Specialty).

Culture and Inclusion

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We're committed to fostering an inclusive environment where everyone can thrive.

About DXC Technology

DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations - helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates. Learn more on dxc.com.