Security Engineering Lead

DXC Technology Company; Farnborough; On-site; GBP 90,000 - 130,000; Full time

Job summary

DXC Technology is seeking a Security Engineering Lead in Hampshire to design and implement robust security controls across cloud and hybrid infrastructures. The role emphasizes hands-on guidance on vulnerability remediation, secure coding, and incident readiness.

You will lead security initiatives with accreditors, apply NCSC guidelines, and ensure alignment with cryptographic risk frameworks while maintaining a zero-trust, cloud-first approach under strict compliance deadlines.

Qualifications

• Experience in cybersecurity, secure systems architecture, and technical security leadership.
• Experience engaging accreditors, NCSC guidelines, and cryptographic risk frameworks.
• Proven ability to lead security initiatives under compliance deadlines.

Responsibilities

• Lead the design and implementation of robust security controls across cloud and hybrid infrastructures.
• Oversee embedding automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines.
• Collaborate with accreditors and project leadership to navigate risk management frameworks.
• Provide hands-on direction to engineers on vulnerability remediation and secure coding standards.
• Demonstrate decisive problem-solving under high-pressure compliance deadlines.

Skills

Security Architecture

DevSecOps

Risk & Governance

Technical Guidance

Zero-trust Architecture

Cloud Security

IaC Security

Vulnerability Management

Education

Cyber or IT NVQ Level 4 or equivalent

Bachelor’s degree in Information Security or Computer Science

CISSP

CISM

CCSP

Job description

Job Description:DXC Technology is committed to building diverse, inclusive teams. We welcome applications from all backgrounds and particularly encourage interest from women, underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone.Security Engineering LeadLocation: Hampshire (onsite 5 days per week)Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.Key ResponsibilitiesSecurity Architecture: Lead the design and implementation of robust security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures.DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines.Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk management frameworks.Technical Guidance: Provide hands-on direction to engineers on vulnerability remediation, secure coding standards, and incident response preparedness.Deep knowledge of secure networking, encryption standards, IAM, and zero-trust architectures.Hands-on experience with cloud security postures (AWS / Azure)Proficiency in infrastructure-as-code (IaC) security and automated vulnerability management tools.Authoritative yet collaborative communication style when engaging technical teams and military stakeholders.Decisive problem-solving capability under high-pressure compliance deadlines.Uncompromising commitment to data protection and national security standards.What you'll bringExperience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging accreditors, NCSC guidelines, and cryptographic risk frameworks.Education & Foundational Benchmark: Cyber or IT NVQ Level 4 or equivalent higher education / degree in Information Security or Computer Science.Professional Certifications: Mandatory senior security certification: CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager); supplementary cloud security certification (e.g. CCSP, AWS/Azure Solutions Architect / Security Specialty).At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.