Senior Security Engineer

Assa Abloy; Remote; GBP 100,000 - 125,000; Full time

Job summary

A global leader in access solutions is seeking a Senior Security Engineer to enhance security in the software delivery lifecycle. This remote position in the UK requires expertise in cyber security architecture, particularly within cloud environments like AWS or Azure, and strong software engineering skills, especially in C#. Responsibilities include defining security testing requirements and leading risk remediation efforts. The role contributes to a culture of security and collaboration within development teams. Join a company dedicated to creating a safer world.

Benefits

25 days holiday + bank holidays

Access to an online benefits portal

Annual discretionary bonus

Company Pension scheme standard 5%

Ex-gratia day for Christmas Eve

Access to Employee Care scheme

Qualifications

• Ability to become a subject matter expert in security implementation.
• Experience with cloud service provider environments.
• Strong understanding of security risk analysis and resolution.

Responsibilities

• Evolve software development lifecycle for secure by default design.
• Define security testing requirements and policies.
• Lead remediation of identified risks and vulnerabilities.

Skills

Knowledge of cyber security architecture in cloud environments (AWS, Azure)

Security hardening in embedded Linux, iOS/Android mobile

Strong software engineering skills (C#, Linux)

Hands-on experience with IaC tools (Terraform, CloudFormation)

Familiarity with OWASP, CVE and security frameworks

Tools

Terraform

CloudFormation

Bicep

Job description

Senior Security Engineer

Do you have the ability to become the subject matter expert in implementation of security throughout the software delivery life cycle and a drive to grow your skills in a collaborative environment? Became a part of the ASSA ABLOY Global Solutions Key and Asset Management business unit and enjoy a culture that empowers you to build a career you can be proud of.

What you would do

As a Senior Security Engineer you will be responsible for evolving the software development lifecycle to support a secure-by-default design that incorporates robust cyber security risk analysis and resolution. Reporting to the DevOps Lead, you\'ll help define security testing requirements, implement policy-as-code solutions, and integrate threat detection and gating into CI/CD pipelines to ensure secure and reliable software delivery. This role is currently completely remote from the UK.

• Attest the cyber security posture across a wide range of areas including Embedded devices, Cloud infrastructure, and Mobile applications, while continuously deepening your understanding of our product platforms to tailor security strategies effectively.
• Implement and maintain Security Posture Management in line with best practices across multiple areas.
• Assist in fostering a security-first culture across development teams and the SDLC.
• Lead the implementation of remediation efforts for identified risks and vulnerabilities, including patch management.
• Collaborate on threat modeling exercises within development and DevOps teams.

The skills and experience you need

We are looking for someone who:

• Has knowledge of cyber security architecture within cloud provider environments such as AWS and/or Azure. Knowledge of Kubernetes is also a bonus.
• Brings specialist security hardening knowledge in one or more areas including embedded Linux, iOS/Android mobile, cloud environments.
• Possesses strong general software engineering skills, ideally in C# and Linux toolchains, Bash scripting and PowerShell.
• Has hands-on experience with IaC tools such as Terraform, CloudFormation, or Bicep.
• Is familiar with relevant software and infrastructure security compliance frameworks and guidelines, e.g. OWASP, CVE and others.

What we offer

We\'re passionate about providing amazing opportunities and benefits, so you can continue and progress a lifelong career with us - here\'s what we have to offer:

• 25 days holiday + bank holidays.
• Ex-gratia day for Christmas Eve.
• Access to an online benefits portal.
• ASSA ABLOY Family Brand discount (Yale).
• 3 x Annual salary life cover.
• Company Pension scheme standard 5%.
• Annual discretionary bonus.
• Access to Employee Care scheme.

We review applications regularly, so don\'t wait

We are building diverse, inclusive teams, and encourage applications from everyone who can see themselves working with us. Just set up your profile and apply here.

To make sure your personal data is safe, we don\'t look at any applications sent by email or post. If you have any questions about the role or the process, email Giulia Virde at [e-mail]

Let\'s create a safer and more open world - together!

To find out more about us, visit www.assaabloy.com

We are the ASSA ABLOY Group

Our people have made us the global leader in access solutions. In return, we open doors for them wherever they go. With nearly 63,000 colleagues in more than 70 different countries, we help billions of people experience a more open world. Our innovations make all sorts of spaces - physical and virtual - safer, more secure, and easier to access.

As an employer, we value results - not titles, or backgrounds. We empower our people to build their career around their aspirations and our ambitions - supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally.

As we welcome new people on board, it\'s important to us to have diverse, inclusive teams, and we value different perspectives and experiences.

#LI-WGIE