Senior Security Enablement Engineer

Phorest Software; Northern Ireland; Remote; GBP 85,000 - 125,000; Full time

Benefits offered by this job

Private healthcare

Wellness days

Employee assistance program

Private online GP service

Competitive compensation

Employee Share Purchase Scheme

Pension

Life Assurance

Income Protection

Bike to work scheme

Tax saver transport tickets

Enhanced maternity/paternity benefits

Learning and development opportunities

Moving days

Job summary

Phorest Software is expanding its security capability and seeking an experienced Security Engineer who will act as a trusted partner to product and engineering teams. You’ll build security tooling, coach teams, and embed security practices across cloud-native, multi-tenant SaaS environments.

With 7+ years in secure development or security engineering, you’ll influence architecture, threat modelling, and secure release processes, while collaborating with stakeholders to reduce risk and enable

Qualifications

• 7+ years hands-on secure development experience.
• Security engineering or application security SME.
• Comfortable using AI tools to accelerate security work.
• Strong working knowledge of AWS security services (IAM, GuardDuty, Security Hub, WAF).
• Familiarity with OWASP and secure SDLC frameworks.
• Experience with SaaS, multi-tenant architectures.

Responsibilities

• Own security engineering outcomes as SME and drive cross-functional improvements.
• Develop and deliver security tooling and patterns integrated into CI/CD and cloud environments.
• Coach and partner with product and engineering teams to raise security capabilities across the org.
• Monitor security signals, perform risk analyses, and contribute to the security program roadmap.
• Support incident response and containment, and enable secure design at key product stages.
• Bridge between security, product, and engineering for practical risk decisions.

Skills

Hands-on secure development

Security engineering

AI-enabled security tooling

Threat modelling

Secure SDLC

SaaS security

Security across multi-tenant

Strong communication

Tools

AWS IAM

GuardDuty

Security Hub

WAF

Job description

About Phorest

Would you like to create the future of a product used by thousands of businesses and millions of consumers? Phorest Salon Software powers over 11,000 hair and beauty salons in Ireland, UK, Germany, Australia, Finland, USA, Canada, UAE and Netherlands and the platform processes 7 million appointments a month for hair and beauty consumers. Phorest is the number 1 salon software brand for premium independent salons in those markets and our next goal is to become a platform upon which other companies can build applications for premium salons.

The Opportunity

We’re adding to our security capability and we are looking for someone who can move the needle, not a ticket-taker, but an experienced engineer who takes initiative, builds things, and genuinely partners with our product and engineering teams and the wider business. You’ll use your deep security expertise not only to solve complex problems, but to raise the security capability of the teams around you.

Reactive work eats into time that should be spent on proactive, strategic programmes. You will change that dynamic: by building security tooling and processes that scale, identifying risks and capability gaps, and turning them into impactful improvements. By embedding yourself in our engineering culture you’ll make security an integral part of how teams build and enable engineers to make good security decisions.

You will function primarily as an enabler, working across our stream-aligned engineering teams to build security knowledge, tooling, and practice where the work actually happens. An integral part of your impact will come through coaching others, sharing knowledge and creating scalable practices that raise the security bar for our Engineering Team.

What You’ll Do

You will own security engineering outcomes - acting as SME, identifying cross-functional opportunities, and driving improvements through to impact.

Security Platform & Developer Tooling

• Partner with engineering teams to introduce tooling that makes secure coding the path of least resistance. Identify opportunities to improve the security experience and take ownership of delivering improvements that materially reduce risk or friction.
• Collaborate with platform engineers to weave security into CI/CD pipelines, our cloud environment and code review workflows, without creating friction or bottlenecks. Establish reusable patterns and practices that enable teams to adopt secure-by-default approaches.
• Work with engineering leads to identify and prioritise process & tooling improvements against our real risk landscape, building shared agreement on what matters most.

Developer Enablement & Partnership

• Proactively identify security knowledge and capability gaps, and build confidence across Phorest engineering through collaborative threat‑modelling sessions, documentation, and hands‑on pairing, so teams can make good security decisions independently.
• Embed with stream-aligned product teams at key stages like design, architecture review, pre‑launch to provide security input as a trusted peer, not an external auditor. Coach teams through complex security decisions, helping them build their own capability.
• Act as a subject matter expert and trusted partner between Security and Product & Engineering, helping teams understand security and compliance requirements.
• Share security learnings, emerging threats and lessons from incidents across Engineering, creating reusable guidance that raises the baseline of secure engineering and proactively creates awareness for how teams consider security.

Security Monitoring & Risk Understanding

• Work alongside the broader security and IT team to proactively monitor security signals and alerts, identify patterns and build shared situational awareness across the team.
• Identify and assess emerging security risks and opportunities, conduct exploratory risk analysis that shapes the security programme roadmap, bringing in the engineering perspective you've built through close team relationships.
• Build out security requirements and review processes for our AWS‑hosted, multi‑tenant SaaS environment.
• Contribute to the on‑call rota, providing security coverage for incidents as they arise.
• Support security incident response end to end, from initial triage and containment through to post‑incident review and remediation tracking.

You take initiative.

We’re looking for someone that creates momentum over responding to demand, we need someone who sees a risk or an opportunity, develops a point of view, and moves, keeping stakeholders informed along the way. You are comfortable defining the problem, deciding your approach and owning the outcome.

You can bridge technical and non‑technical worlds.

Phorest's engineering teams are sharp and want genuine security partnership, but not everyone in the company is technical, so you will need to be credible with both explaining risk clearly to technical and non technical audiences, and translating security requirements into practical engineering guidance.

You have a proactive growth mindset.

You seek feedback, challenge the status quo, embrace ambiguity and turn what you learn into action — sharing knowledge and raising the capability of those around you.

You are technically grounded.

• Demonstrable Hands‑on secure development experience (preferably 7+ years); you have written production code at some point in your career.
• Deep enough experience in a security engineering or application security role to act as a subject matter expert for complex security challenges..
• Comfortable using AI tools to accelerate security work, generating, and analysing at pace while keeping your human judgment at the center of every decision.
• Strong working knowledge of AWS security, IAM, GuardDuty, Security Hub, WAF, and related services.
• Familiarity with common vulnerability classes, OWASP, and secure SDLC frameworks.
• Comfortable working across SaaS, multi‑tenant architectures.

You bring the soft skills.

• Strong communicator, written, verbal, and async.
• Able to build trust with engineering teams without relying on authority.
• Proactive in keeping stakeholders informed; you surface problems early rather than waiting to have answers.
• Comfortable working in a distributed team where you own outcomes end to end.

NICE TO HAVE

• Experience working in a payments or regulated SaaS environment (PCI DSS, GDPR, HIPAA).
• Familiarity with Team Topologies or other platform/enabling team models.
• Exposure to offensive security techniques, penetration testing, red teaming, or bug bounty.
• Experience building security enablement or champion programmes that improve security capability and ownership across an engineering organisation.

Benefits

• Your wellbeing is important to us - we provide private healthcare, 2 Wellness Days, an employee assistance program and a free online GP service.
• As part of our Financial Wellbeing, we provide competitive Compensation, an Employee Share Purchase Scheme, Pension, Life Assurance, and Income Protection.
• We help you travel by providing a bike to work scheme as well as tax saver transport tickets.
• We support the women who work in Phorest by offering 2 weeks leave for Fertility Treatment, Pregnancy Loss and Menopause.
• We care for your family and provide Enhanced Maternity and Paternity Benefits.
• We grow our own timber! We provide a great learning environment and extensive development opportunities. We run development programs and provide access to many online resources including LinkedIn learning.
• Moving house? Phorest employees get 3 moving days.

Want to learn more about Phorest? Check out nothingventured.rocks for our blog and Insights on building an evergreen company from the team here at Phorest.

Phorest is an equal opportunity employer. For this position, flexi-time and working from home is possible. We are also open to remote work.

Research shows that while men apply to jobs when they meet an average of 60% of the criteria, women and other marginalised folks tend to only apply when they check every box. So if you think you have what it takes, but don't necessarily meet every single point on the job description, we'd love to have a chat and see if you could be a great fit.