Security Engineering Lead — Cloud & Web Apps

Kainos; United Kingdom; On-site; GBP 90,000 - 110,000; Full time

Job summary

Kainos is seeking a Lead Security Engineer (Consultant) to direct security testing across platforms and services. You will shape testing methodology, engagement scope, and tool choices, while mentoring junior engineers and guiding customers on best security practices.

You will collaborate with agile teams to embed security throughout the SDLC and lead a small team to solve challenging security problems with effective leadership.

Qualifications

• Expertise in securing Web Applications and Cloud Platforms (e.g. AWS/Azure).
• Experience in Defence Sector.
• Current, Active Security Clearance.
• Expertise in testing security using manual or automated tools (penetration tests on web apps, networks, systems).
• Expertise in assessing software/infrastructure source code from a security standpoint.
• Experience with CI/CD security practices.
• Knowledge of standards such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, SOC2.
• Knowledge of common cyber attack vectors and threat modelling.
• Excellent communication skills to explain security concepts to varied audiences.
• Mentoring and developing team members.
• Good programming/scripting across Windows/Linux/MacOS.
• Stays up to date with new threats.

Responsibilities

• Lead security engineering and testing across Kainos platforms and services.
• Set direction on security testing methodology, engagement scoping, and tool selections.
• Develop junior security engineers and provide guidance to customers and teams.
• Collaborate with agile delivery teams to embed security practices in the software development journey.
• Coach, manage and develop a small security staff and oversee performance.

Skills

Security engineering

Threat modelling

CI/CD

Cloud security

Tools

Burp Suite

OWASP-ZAP

Nessus

Kali

Metasploit

Job description

Kainos is seeking a Lead Security Engineer (Consultant) to direct security testing across platforms and services. You will shape testing methodology, engagement scope, and tool choices, while mentoring junior engineers and guiding customers on best security practices.

You will collaborate with agile teams to embed security throughout the SDLC and lead a small team to solve challenging security problems with effective leadership.