Senior Security Engineer

Ronald James Group; Newcastle upon Tyne; Remote; GBP 85,000 - 110,000; Full time

Job summary

Ronald James Group is seeking an experienced Senior Security Engineer to own security across applications, cloud infrastructure, and engineering practices. You will work hands-on to identify vulnerabilities, implement fixes, and strengthen threat detection on a modern, cloud-based platform.

The role emphasizes collaboration with software teams, integration of automated security testing into CI/CD, and use of AI tools to accelerate secure coding and incident response across AWS environments.

Qualifications

• Strong hands-on experience with JavaScript/TypeScript/Node.js in production environments.
• Proven ability to identify, remediate and verify application security vulnerabilities.
• Solid understanding of authentication, authorization, API security and injection risks.

Responsibilities

• Identify, investigate and remediate security vulnerabilities across backend services, APIs, web and mobile apps, and dependencies.
• Use AI tools to investigate code, test security hypotheses and develop verified fixes.
• Strengthen AWS security across IAM, networking, ECS/Lambda, and secrets management.

Skills

JavaScript

TypeScript

Node.js

Tools

Terraform

CloudFormation

Wiz

Job description

We're working with an established technology company looking for an experienced Senior Security Engineer to join their team and strengthen security across their applications, cloud infrastructure and engineering practices. This is an opportunity for a hands-on security professional to take ownership of complex technical challenges, identify and resolve vulnerabilities, and implement practical improvements across a modern, cloud-based platform. You'll work closely with engineering teams to enhance application security, strengthen cloud controls and improve threat detection, while using AI tools to support efficient and effective security practices.

Please note: This is a UK remote role.

Some of the responsibilities:

• Identify, investigate and remediate security vulnerabilities across backend services, APIs, web and mobile applications, and software dependencies.
• Use AI tools to investigate code, test security hypotheses and develop independently verified security fixes.
• Strengthen AWS security across IAM, networking, ECS workloads, Lambda functions, messaging permissions and secrets management.
• Implement and maintain secure infrastructure configurations using Terraform and CloudFormation.
• Review and improve data access controls across MongoDB and Snowflake.
• Manage cloud security monitoring tools, including Wiz, to improve visibility, prioritise vulnerabilities and support remediation.
• Develop and optimise threat detection across AWS infrastructure and application logs.
• Investigate security alerts, respond to incidents and implement measures to reduce future risks.
• Assess existing security controls, identify weaknesses and prioritise improvements based on exposure and business impact.
• Evaluate and implement security tools to improve monitoring, coverage and operational efficiency.
• Integrate automated security testing and controls into CI/CD pipelines.
• Collaborate with software engineers to implement secure code changes and improve security practices across the development lifecycle.

Some of the requirements:

• Strong hands-on software engineering experience using JavaScript, TypeScript and Node.js in production environments.
• Proven experience identifying, remediating and verifying application security vulnerabilities.
• Strong understanding of application security principles, including authentication, authorisation, API security, injection vulnerabilities and SSRF.
• Practical experience securing AWS environments, including IAM, containerised workloads and serverless services.
• Experience working with infrastructure as code tools such as Terraform and CloudFormation.
• Strong understanding of threat detection, security monitoring, incident investigation and response.
• Experience using AI coding and security tools, with the ability to critically review and validate their outputs.
• Ability to implement security improvements directly through code and infrastructure changes.
• Strong problem-solving skills, with the ability to prioritise security risks and deliver effective solutions.
• Excellent communication skills and the ability to collaborate with engineering teams and technical stakeholders.
• Experience with Wiz or similar cloud security platforms would be advantageous.
• Knowledge of React, React Native, MongoDB, Snowflake or event-driven systems would be beneficial.
• Python experience and the ability to develop security tooling would be an advantage.