Senior Product Security Engineer: Cloud, AppSec & DevSecOps

Copello; Uxbridge; Hybrid; GBP 85,000 - 120,000; Full time

Job summary

Copello is recruiting a Senior Software Cybersecurity Engineer to join a high-growth technology organisation in Uxbridge, operating in a hybrid model. The role covers Product Security, AppSec, Cloud, Kubernetes and DevSecOps, with responsibilities spanning secure SDLC integration, threat modelling and secure architecture across AWS/Azure/GCP.

The candidate will bring 7+ years in Cybersecurity/AppSec, hands-on SAST/DAST/SCA, and strong knowledge of OWASP, NIST, ISO 27001 and CIS frameworks.

Qualifications

• 7+ years' Cybersecurity / AppSec / Security Engineering experience.
• Hands-on SAST / DAST / SCA / vulnerability management.
• Threat modelling experience (STRIDE / PASTA).
• Desirable: vulnerability research, exploit development, penetration testing, Splunk/OSQuery, AI/ML security & security certifications.

Responsibilities

• Embed security across the SDLC & CI/CD pipelines.
• Threat modelling, risk assessments & security architecture.
• Secure cloud platforms (AWS/Azure/GCP), Kubernetes & containers.
• Implement SAST, DAST, SCA, SBOM & secret scanning.
• Vulnerability triage, validation, remediation & PoC development.
• Security code reviews & secure-by-design guidance.
• Detection engineering, automation & incident response.
• Develop security standards, processes & technical runbooks.

Skills

Cloud security

Kubernetes security

DevSecOps

Threat modelling

Go

C#

OWASP

NIST

ISO 27001

CIS

AWS

Azure

GCP

Job description

Copello is recruiting a Senior Software Cybersecurity Engineer to join a high-growth technology organisation in Uxbridge, operating in a hybrid model. The role covers Product Security, AppSec, Cloud, Kubernetes and DevSecOps, with responsibilities spanning secure SDLC integration, threat modelling and secure architecture across AWS/Azure/GCP.

The candidate will bring 7+ years in Cybersecurity/AppSec, hands-on SAST/DAST/SCA, and strong knowledge of OWASP, NIST, ISO 27001 and CIS frameworks.