Senior Security Engineer

Data Science Festival; Greater London; Hybrid; GBP 100,000 - 135,000; Full time

Benefits offered by this job

Generous holiday allowance

Pension scheme

Ongoing learning and professional development

Collaborative engineering culture

Career progression opportunities

Job summary

Data Science Festival is seeking a Staff Software Security Engineer to join their London team. This hybrid position offers a salary of up to £135,000 and the chance to work on innovative AI-driven products.

In this role, you will implement security initiatives across engineering teams, work closely with developers on secure coding, and improve vulnerability management processes. Ideal candidates should have experience in application security and cloud environments.

The organization values security as a strategic priority, offering opportunities for career progression and ongoing professional development.

Qualifications

• Commercial experience as a Security Engineer or DevSecOps Engineer.
• Strong understanding of application security principles.
• Hands-on experience securing cloud environments.

Responsibilities

• Drive application and product security initiatives.
• Conduct security reviews and threat modelling.
• Embed security tooling into CI/CD and development workflows.
• Define and promote security standards and best practices.

Skills

Application Security

Cloud Security

Secure Software Development

Vulnerability Management

Stakeholder Management

Threat Modelling

CI/CD Security

Cloud Environments (AWS, GCP, Azure)

Job description

Staff Software Security Engineer

Salary: Up to £135,000 + Benefits

Location: London (Hybrid – 3 days per week in the office)

We are currently looking for a Staff Software Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation.

Reporting to the Head of Engineering, the Staff Software Security Engineer will play a pivotal role in shaping the organisation’s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.

This is not a traditional SOC or operational security position. Instead, the Software Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.

The Opportunity

As the Staff Software Security Engineer, you’ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure‑by‑design culture across the business.

Key responsibilities include:

• Driving application and product security initiatives across multiple engineering teams
• Conducting security reviews, threat modelling and risk assessments
• Implementing and improving vulnerability management processes
• Embedding security tooling into CI/CD pipelines and development workflows
• Partnering with developers to promote secure coding practices
• Reviewing cloud infrastructure and architecture from a security perspective
• Supporting incident response and remediation activities when required
• Defining and promoting security standards, policies and best practices
• Influencing technical decision‑making across engineering and leadership teams

This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.

What’s in it for you?

• Salary up to £135,000
• Hybrid working model
• Opportunity to work on cutting‑edge AI and technology products
• High level of autonomy and influence
• Collaborative engineering culture
• Career progression opportunities as the business continues to scale
• Ongoing learning and professional development
• Pension scheme
• Generous holiday allowance

Skills and Experience

• Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer
• Strong understanding of application security principles and secure software development practices
• Experience working closely with software engineering teams
• Hands‑on experience securing cloud environments (AWS, GCP or Azure)
• Experience with vulnerability management, threat modelling and security reviews
• Knowledge of CI/CD security and modern development practices
• Excellent stakeholder management and communication skills

Eligibility

Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.