Senior Cloud Security Engineer – DevSecOps Threat Modelling

Kainos; Birmingham; On-site; GBP 80,000 - 120,000; Full time

Job summary

Kainos is seeking a Senior Security Engineer to design and implement secure, cloud-based software for clients. You will embed security into dev lifecycles, drive vulnerability management and threat modelling, and raise cyber security awareness across delivery teams.

As part of an Agile, multidisciplinary team, you will coach others, automate security artifacts, and work with cloud platforms to ensure secure architectures and continuous improvement in security practices.

Qualifications

• Experience implementing application security or cloud security in complex environments.
• Defence sector experience and active security clearance are highly valued.
• Ability to communicate security issues clearly to technical and non-technical audiences.
• Understanding of web application security concepts, encryption, and cryptography.

Responsibilities

• Collaborate with agile teams to plan security requirements in SSDLC.
• Recommend cloud security best practices and automate baselines.
• Implement automated security tooling in CI/CD pipelines.
• Coordinate with external teams for penetration testing.
• Translate security outputs into deliverable security stories.

Skills

App security

Cloud security

Threat modelling

Vulnerability management

SSDLC

Security storytelling

CI/CD security

Scripting/Programming

Education

Diploma/Bachelor in Cyber Security or Computer Science

Active Security Clearance desirable

Tools

Git

Static analysis tools

Dynamic analysis tools

Cloud security baselines (CIS, etc.)

Terraform/ARM/Ansible

Job description

Kainos is seeking a Senior Security Engineer to design and implement secure, cloud-based software for clients. You will embed security into dev lifecycles, drive vulnerability management and threat modelling, and raise cyber security awareness across delivery teams.

As part of an Agile, multidisciplinary team, you will coach others, automate security artifacts, and work with cloud platforms to ensure secure architectures and continuous improvement in security practices.