Senior Security Engineer

Oneiro Solutions LLC; United Kingdom; On-site; GBP 90,000 - 120,000; Full time

Job summary

Oneiro Solutions LLC is seeking a Security Engineer to shape security from the ground up. You will be the first security-focused engineer, defining standards, tooling, and processes while embedding security into our software delivery lifecycle.

You will split time between strengthening our security posture and contributing directly to our cloud platform and engineering systems. This is a hands-on role with significant ownership and the chance to influence security across the organisation.

Qualifications

• Experience designing security controls that support engineering velocity.
• Experience with cloud security and securing Kubernetes.
• Experience embedding security into CI/CD pipelines.
• Ability to work hands-on with IaC and automation.
• Strong problem-solving and collaboration skills.

Responsibilities

• Develop and evolve the company's security strategy alongside the Head of Security & Cloud Platforms.
• Design practical security controls that support engineering velocity.
• Establish security standards, policies and technical guardrails.
• Introduce security metrics and reporting.
• Improve identity and access management.
• Secure Kubernetes workloads and cloud infrastructure.
• Build automated security controls into CI/CD pipelines.
• Improve secrets management.
• Develop security automation and tooling.
• Evaluate, implement and manage technologies such as VDM, SAST/DAST/SCA, container security, CSPM, EDR, secrets management, infra scanning, supply chain security.
• Build automation and contribute to infrastructure as code.
• Review architecture and designs.
• Lead vulnerability remediation initiatives.
• Support security investigations.
• Run threat modelling exercises.
• Improve monitoring and detection capabilities.

Skills

AWS

Docker

Terraform

Infrastructure as Code

IAM

Vulnerability Management

Security Automation

Tools

GitHub Actions

Azure DevOps

GitLab

SAST/DAST/SCA

Container Security

Job description

This is a rare opportunity to build security from the ground up.

As our first Security Engineer, you'll have significant influence over how security is implemented across the business. You'll define security standards, select and implement security tooling, improve engineering processes and work closely with development teams to embed security into our software delivery lifecycle.

This is not a governance-only role.

We're looking for an engineer who enjoys writing code, automating security, working in cloud infrastructure and solving complex technical problems. You'll split your time between improving our security posture and contributing directly to our cloud platform and engineering systems.

If you enjoy building rather than policing, you'll fit in well here.

What You'll Do

Build our Security Capability

• Develop and evolve the company's security strategy alongside the Head of Security&Cloud Platforms.
• Design practical security controls that support engineering velocity.
• Establish security standards, policies and technical guardrails.
• Introduce security metrics and reporting.

Build Security into our Platform

• Improve identity and access management.
• Secure Kubernetes workloads and cloud infrastructure.
• Build automated security controls into CI/CD pipelines.
• Improve secrets management.
• Develop security automation and tooling.

Security Tooling

Evaluate, implement and manage technologies such as:

• Vulnerability Management
• SAST / DAST / SCA
• Container Security
• CSPM
• Endpoint Detection&Response
• Secrets Management
• Infrastructure Scanning
• Supply Chain Security

The expectation is not that every tool already exists—you'll help determine what we should use.

You'll remain a hands-on engineer and contribute to the wider platform by:

• Building automation
• Contributing to infrastructure as code
• Reviewing architecture and designs

Security Operations

• Lead vulnerability remediation initiatives.
• Support security investigations.
• Run threat modelling exercises.
• Improve monitoring and detection capabilities.

What We're Looking For

We're less interested in ticking every box than finding someone who enjoys solving difficult technical problems.

You'll probably have experience in many of these areas:

Cloud

• AWS (preferred)
• Docker
• Terraform
• Infrastructure as Code

Security

• Application Security
• Secure SDLC
• IAM
• Vulnerability Management
• Security Automation

DevSecOps

Experience integrating security into:

• GitHub Actions / Azure DevOps / GitLab
• Automated testing
• Policy as Code

What Success Looks Like

After your first year you will have:

• Established the foundations of Oneiro's security programme.
• Embedded security into our engineering lifecycle.
• Implemented a pragmatic set of security tools.
• Reduced engineering friction through automation.
• Improved visibility across our cloud estate.
• Helped shape the long-term security strategy.
• Become a trusted technical advisor to engineering teams.
• Delivered meaningful improvements to the platform itself.

How We Work

We value engineers who:

• Take ownership.
• Prefer collaboration over gatekeeping.
• Make pragmatic, risk-based decisions.
• Continuously learn and improve.
• Communicate clearly with both engineers and non-technical stakeholders.

You'll work closely with Engineering, Platform, Product and Leadership teams, helping everyone build secure systems without slowing innovation.

You'll be joining at a pivotal stage in our growth.

Rather than inheriting years of technical debt and legacy processes, you'll help define how security is done across the organisation. You'll have genuine ownership, significant technical freedom and the opportunity to build a modern security function that engineering teams genuinely enjoy working with.

This is an opportunity to leave a lasting mark on both our platform and our culture.