Security Software Engineer, Security & Trust

Qoria; Leeds; On-site; GBP 65,000 - 90,000; Full time

Job summary

Qoria is seeking a Security Software Engineer to join the Security & Trust team in the UK. You will translate security and compliance requirements into automated controls, build pipelines, and develop continuous monitoring across cloud environments.

You should have 3-5+ years in software engineering, strong Python skills, and hands-on AWS experience. Expect an automation-first, autonomous role with collaboration across engineering and security teams.

Qualifications

• 3-5+ years of software engineering experience, ideally in security, infrastructure, backend, Devops or platform engineering.
• Strong proficiency in Python (or a similar language), including production-quality, tested code and APIs.
• Hands-on experience with AWS, including IAM, networking, and security groups.
• Experience with infrastructure-as-code (Terraform) and CI/CD pipelines.
• Automation-first mindset with ability to eliminate manual processes.
• Curious, builder’s mindset, able to stand up new systems and drive projects autonomously.
• Strong communication skills for collaboration with non-engineers.
• Bachelor's degree in Computer Science or related field, or equivalent practical experience.

Responsibilities

• Translate security and compliance requirements into automated technical controls using policy-as-code in CI/CD and IaC.
• Build pipelines and integrations to collect compliance evidence from internal systems for live audits.
• Develop continuous monitoring for security controls and cloud environments; integrate with GRC tooling like Vanta.
• Apply AI and automation to streamline compliance workflows and evidence gathering.
• Contribute to the Common Control Framework to support audits, risk assessments, and vendor reviews.
• Build tooling and workflows to improve reporting and reduce compliance burden on engineering teams.
• Collaborate with Security Assurance Manager and cross-functional teams to embed security and compliance into workflows.

Skills

Python

AWS

CI/CD

IaC

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Open Policy Agent

Vanta

Jira

Job description

Want to deliver tech with purpose, with people who care?

Join us in our mission to create solutions that help keep children safe online.

Who are we?

Headquartered in Perth, Australia, with offices around the world, Qoria is an ASX-listed global leader in child digital safety technology and services. We are a purpose-driven business operating under the Linewize brand in North America and Asia Pacific, the Smoothwall brand in the UK, the Qustodio brand in EMEA, and Qoria LK in Sri Lanka. Our solutions are used by schools, school districts, and parental communities to protect children from harmful online content, identify students at risk based on their digital behaviours, and help teachers maintain focus and safe learning environments in the digital classroom. Today, 30,000 schools and 7 million parents rely on our solutions to help keep 25 million children safe across 180 countries worldwide.

Whats The Opportunity

As a Security Software Engineer on our Security & Trust team, you'll build the systems that help mature Aura's security and compliance commitments. You'll partner with our Security Assurance Manager , who owns our compliance frameworks and audit program, and be responsible for turning those requirements into automated, enforceable technical controls: policy-as-code in our pipelines, continuous monitoring across our cloud environments, and scalable workflows that grow with the business.

This is an engineering role first. You don't need a compliance or security background; we'll teach you the frameworks. What we need is someone who writes solid code, thinks in systems, and wants to apply those skills to one of the most interesting problems in security right now.

Day To Day

Build & Automate

• Translate security and compliance requirements, defined with our Security Assurance Manager , into automated technical controls, using policy-as-code enforced in CI/CD and against infrastructure-as-code.
• Build pipelines and integrations that collect compliance evidence directly from our internal systems, so audits run on live data rather than screenshots and spreadsheets.
• Develop continuous monitoring for security controls and cloud environments, integrating with our GRC tooling (e.g., Vanta) and surfacing issues where engineers already work.
• Apply AI and automation to streamline compliance workflows — from intelligent triage of risk assessments to automated evidence gathering and control validation.

Scale The Program

• Help engineer our Common Control Framework, building a unified structure that serves audits, risk assessments, and vendor reviews from a single source of truth.
• Build the tooling and workflows that let the Security & Trust team operate efficiently as the company grows — automating repetitive processes, improving reporting, and reducing the compliance burden on engineering teams.
• Support audit readiness across multiple frameworks (SOC 2, SOX, ISO 27001) by ensuring evidence is continuously collected, organized, and accessible.

Collaborate

• Work hand in hand with our Security Assurance Manager , who owns frameworks, policy, and audits, providing the technical implementation and evidence behind our compliance program.
• Partner across business and technical teams to embed security and compliance into existing workflows — our team philosophy is partnership, not mandates.
• Contribute to cross-functional initiatives including vendor risk management, access reviews, and security advisory across the organization.

What You Bring To The Table

• 3-5+ years of software engineering experience, ideally in security, infrastructure, backend, Devops or platform engineering.
• Strong proficiency in Python (or a similar language), including writing production-quality, tested code and working with APIs.
• Hands-on experience with AWS (or another major cloud provider), including IAM, networking, and security groups.
• Experience with infrastructure-as-code (e.g., Terraform) and CI/CD pipelines.
• An automation-first mindset — you see a manual process and immediately think about how to eliminate it.
• Genuine curiosity and a builder’s mentality. You’re energized by standing up new systems, not just maintaining existing ones.
• A self-starter mentality, with the ability to work autonomously, manage competing priorities, and drive projects to completion in a fast-paced environment.
• Strong communication skills. You’ll work closely with non-engineers and need to explain technical concepts to non-technical partners.
• Bachelor's degree in Computer Science or a related field, or equivalent practical experience.

Nice To Have

• Experience with policy-as-code tools such as Open Policy Agent.
• Exposure to ML systems or MLOps tooling, or applying AI to automate business processes.
• Familiarity with security and privacy frameworks such as SOC 2, ISO 27001, PCI, SOX, NIST AI RMF, and EU/US data privacy laws.
• Experience with GRC and ticketing tools such as Vanta or Jira.
• Experience building internal tools, developer platforms, or automation frameworks.