Senior Cloud Security Engineer | DevSecOps & SSDLC

Kainos; United Kingdom; On-site; GBP 70,000 - 110,000; Full time

Job summary

Kainos is seeking a Senior Security Engineer to design and implement secure, cloud-based software solutions. You will work in an Agile, multi-disciplinary team, embedding DevSecOps across the SDLC and automating security artifact generation.

You will also coach junior team members and help drive cyber security practices within delivery squads, including threat modelling and vulnerability management in a Defence-adjacent security environment.

Qualifications

• Experience implementing application security or cloud security in a delivery context.
• Experience related to Defence sector security will be advantageous.
• Active Security Clearance is preferred or required.
• Strong understanding of web application security principles and cryptography.
• Familiarity with threat modelling, vulnerability management, and secure SDLC practices.
• Experience integrating security tools (static/dynamic analysis) into SSDLC.
• Ability to communicate security risks clearly to technical and non-technical audiences.

Responsibilities

• Collaborate with development and cloud platform teams to embed security in the SSDLC.
• Recommend and implement secure cloud baselines and automation for compliance.
• Integrate automated security tooling into CI pipelines to validate requirements.
• Coordinate with external organisations for planning and executing penetration tests.
• Review security outputs and translate into actionable stories for delivery teams.
• Verify adherence to security principles and architectural patterns.
• Promote cyber security practices within Agile teams.
• Mentor and develop junior members of the security team.

Skills

Application security

Cloud security

Threat modelling

Vulnerability management

Penetration testing

Communication skills

Education

Cyber security certification (desirable)

Tools

CI tooling

Git

Python/Java/.NET/JS

Terraform/Ansible

Job description

Kainos is seeking a Senior Security Engineer to design and implement secure, cloud-based software solutions. You will work in an Agile, multi-disciplinary team, embedding DevSecOps across the SDLC and automating security artifact generation.

You will also coach junior team members and help drive cyber security practices within delivery squads, including threat modelling and vulnerability management in a Defence-adjacent security environment.