Senior Security Engineer – AppSec & DevSecOps (Hybrid)

Copello; City of Edinburgh; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

Copello is seeking a Senior Software Cybersecurity Engineer in Edinburgh (Hybrid). You will join Avigilon's security team to protect the software, cloud platforms and intellectual property behind their physical and video security solutions, while advancing secure-by-design practices across the SDLC.

This hands-on role involves threat modelling, security architecture reviews and embedding SAST/DAST/SCA into CI/CD, plus vulnerability management, IAM controls and secure coding guidance with

Qualifications

• 7+ years' experience in Cybersecurity, Application Security or Security Engineering.
• Strong AppSec / DevSecOps experience.
• Hands-on experience with AWS, Azure or GCP.
• Strong Kubernetes and Docker/container security knowledge.
• Experience integrating SAST, DAST, SCA and security tooling into CI/CD.
• Strong understanding of threat modelling, IAM, cryptography and application security.
• Experience with Go and/or C# development.
• Knowledge of HTTP, REST, TLS and TCP/IP.
• Strong understanding of OWASP, NIST, ISO 27001 and CIS.
• Excellent communication skills with the ability to work closely with developers and technical stakeholders.

Responsibilities

• Conduct threat modelling, risk assessments and security architecture reviews.
• Assess security across cloud and Kubernetes/container environments.
• Embed SAST, DAST, SCA and secret scanning into CI/CD pipelines.
• Perform security code reviews and provide secure coding guidance.
• Define security requirements and support engineering teams with secure-by-design practices.
• Drive vulnerability management, particularly across Kubernetes and container images.
• Triage and validate vulnerabilities, including developing PoCs where appropriate.
• Manage IAM and key management controls.
• Support product security incident response, root-cause analysis and remediation.
• Develop detection engineering capabilities, IDS/IPS rules and technical runbooks.
• Monitor emerging threats and continuously improve security controls.
• Work across engineering, security and compliance teams to drive security improvements.

Skills

AppSec/DevSecOps

Threat modelling

IAM & cryptography

Secure coding guidance

Communication with engineers

Tools

AWS

Azure

GCP

Kubernetes

Docker

CI/CD tooling

Job description

Copello is seeking a Senior Software Cybersecurity Engineer in Edinburgh (Hybrid). You will join Avigilon's security team to protect the software, cloud platforms and intellectual property behind their physical and video security solutions, while advancing secure-by-design practices across the SDLC.

This hands-on role involves threat modelling, security architecture reviews and embedding SAST/DAST/SCA into CI/CD, plus vulnerability management, IAM controls and secure coding guidance with