Senior Java Software Engineer

Avaloq; City of Edinburgh; On-site; GBP 85,000 - 110,000; Full time

Job summary

Avaloq in Edinburgh is seeking a Senior Software Engineer in the Security Assurance team to advance automation and tooling that embeds security across the software development lifecycle. You will design and maintain CI/CD pipelines, automation tooling, and backend services to enable secure delivery of software.

Responsibilities include integrating automated security scanning, monitoring validation processes, and developing event-driven workflows with Jira.

Qualifications

• Senior Software Engineer with focus on security within SDLC.
• Experience building automated security tooling and pipelines.

Responsibilities

• Design, develop and maintain CI/CD pipelines and automation tooling for security assurance.
• Build backend services and APIs to support security processes.
• Integrate automated security scanning across the software development lifecycle.

Skills

CI/CD pipelines

Automation tooling

Backend services

APIs

Security scanning

Vulnerability management

Jira

Kubernetes

OpenShift

OCI

Cloud security

Secure SDLC

Tools

Jira

OCI

Job description

This is an exciting opportunity to join Avaloq’s Edinburgh office as part of our international Security team. You will join an experienced group of software engineers responsible for the frameworks, platforms and tools that help secure Avaloq’s technology landscape.

As a Senior Software Engineer in the Security Assurance team, you will build and enhance the automation and tooling that embeds security throughout the software development lifecycle. Working across software engineering, DevOps, cloud and application security, you will create scalable solutions that enable development teams to deliver secure, high-quality software.

• Design, develop and maintain CI/CD pipelines, automation tooling, backend services and APIs that support security assurance and vulnerability management.
• Integrate automated security scanning throughout the software development lifecycle, covering source code, dependencies, repositories and containers.
• Monitor security validation processes, assess vulnerabilities and risk, investigate false positives and support effective remediation.
• Develop automated vulnerability processing, reporting and event-driven workflows, integrating with internal platforms and tools such as Jira.
• Build security solutions for containerized and cloud-native environments, including Kubernetes, OpenShift and Oracle Cloud Infrastructure (OCI).
• Collaborate with engineering and technology teams to resolve security issues and continuously improve secure software development practices.