Senior Security Engineer

Copello Global; City of Edinburgh; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

Copello Global is seeking a Senior Software Cybersecurity Engineer for Edinburgh on a hybrid basis. You’ll work closely with software teams to identify vulnerabilities and build secure-by-design solutions across cloud and containerized environments.

The role requires hands-on threat modelling, security reviews, CI/CD integration of SAST/DAST/SCA, and vulnerability management with Kubernetes. Strong Go/C# development and OWASP/NIST knowledge are essential.

Qualifications

• 7+ years of experience in Cybersecurity, Application Security or Security Engineering.
• Hands-on experience with AWS, Azure or GCP.
• Strong Kubernetes and Docker/container security knowledge.
• Experience integrating SAST, DAST, SCA and security tooling into CI/CD.
• Strong understanding of threat modelling, IAM, cryptography and application security.
• Experience with Go and/or C# development.
• Knowledge of HTTP, REST, TLS and TCP/IP.
• Strong understanding of OWASP, NIST, ISO 27001 and CIS.
• Excellent communication skills with the ability to work closely with developers and technical stakeholders.
• Experience with vulnerability research / exploit development.
• Manual penetration testing.
• Cloud, web, embedded or mobile security.
• Splunk / OSQuery.
• AI/ML security.
• Distributed systems.
• AWS Security Specialty, OSCP, CISSP, CCSP, CCAK or SANS/GIAC certifications.

Responsibilities

• Conduct threat modelling, risk assessments and security architecture reviews
• Assess security across cloud and Kubernetes/container environments
• Embed SAST, DAST, SCA and secret scanning into CI/CD pipelines
• Perform security code reviews and provide secure coding guidance
• Define security requirements and support engineering teams with secure-by-design practices
• Drive vulnerability management, particularly across Kubernetes and container images
• Triage and validate vulnerabilities, including developing PoCs where appropriate
• Manage IAM and key management controls
• Support product security incident response, root-cause analysis and remediation
• Develop detection engineering capabilities, IDS/IPS rules and technical runbooks
• Monitor emerging threats and continuously improve security controls
• Work across engineering, security and compliance teams to drive security improvements

Skills

AppSec

DevSecOps

Cloud security

Kubernetes security

Threat modelling

IAM

Cryptography

Security code reviews

Go development

C# development

Tools

AWS

Azure

GCP

Kubernetes

Docker

CI/CD tooling

Job description

Senior Software Cybersecurity Engineer - Edinburgh (Hybrid)

Are you a Senior Cybersecurity Engineer with strong AppSec, DevSecOps, Cloud and Kubernetes experience?

I'm currently working on an exciting opportunity, supporting the Avigilon security team in protecting the software, cloud platforms and intellectual property behind their physical and video security solutions.

This is a hands-on role where you'll work closely with software engineering teams to identify vulnerabilities, improve security throughout the SDLC and build secure-by-design solutions.

What you'll be doing

• Conduct threat modelling, risk assessments and security architecture reviews
• Assess security across cloud and Kubernetes/container environments
• Embed SAST, DAST, SCA, SBOM and secret scanning into CI/CD pipelines
• Perform security code reviews and provide secure coding guidance
• Define security requirements and support engineering teams with secure-by-design practices
• Drive vulnerability management, particularly across Kubernetes and container images
• Triage and validate vulnerabilities, including developing PoCs where appropriate
• Manage IAM and key management controls
• Support product security incident response, root-cause analysis and remediation
• Develop detection engineering capabilities, IDS/IPS rules and technical runbooks
• Monitor emerging threats and continuously improve security controls
• Work across engineering, security and compliance teams to drive security improvements

You'll ideally have:

• 7+ years' experience in Cybersecurity, Application Security or Security Engineering
• Hands-on experience with AWS, Azure or GCP
• Strong Kubernetes and Docker/container security knowledge
• Experience integrating SAST, DAST, SCA and security tooling into CI/CD
• Strong understanding of threat modelling, IAM, cryptography and application security
• Experience with Go and/or C# development
• Knowledge of HTTP, REST, TLS and TCP/IP
• Strong understanding of OWASP, NIST, ISO 27001 and CIS
• Excellent communication skills with the ability to work closely with developers and technical stakeholders

Experience with:

• Vulnerability research / exploit development
• Manual penetration testing
• Cloud, web, embedded or mobile security
• Splunk / OSQuery
• AI/ML security
• Distributed systems
• AWS Security Specialty, OSCP, CISSP, CCSP, CCAK or SANS/GIAC certifications

Why consider it?

You'll join a global technology organisation developing mission-critical security and video technologies used to help protect people, property and communities worldwide.

You'll have the opportunity to work at the intersection of:

Application Security | Cloud Security | Kubernetes | DevSecOps | Vulnerability Research | Product Security with strong career development, flexible working and an excellent benefits package.