Senior Security Engineer – Cloud & DevSecOps Innovator

Visa Hunt; United Kingdom; On-site; GBP 70,000 - 90,000; Full time

Job summary

Kainos is seeking a Senior Security Engineer to partner with development and cloud teams to design and implement secure, cloud-based software solutions. You will embed security into the SDLC, automate security artifacts, and raise cyber security awareness across Agile teams.

You will provide SME guidance on threats, vulnerabilities, and security controls, helping to advance security maturity while coaching junior team members in a fast-paced, collaborative environment.

Qualifications

• Experience implementing application security or Cloud platform security.
• Experience in Defence Sector.
• Active Security Clearance.
• Strong understanding of web application security.
• Knowledge of modern cryptography and encryption methods.
• Familiarity with threat modelling, vulnerability management, app security testing and penetration testing.
• Experience integrating security tools (static/dynamic analysis) into SSDLC.
• Proficiency with Git and scripting (Bash, PowerShell) or programming (Python, Java, .NET, JS) or IaC (Terraform, ARM, Ansible).
• Ability to communicate security issues to technical and non-technical stakeholders.

Responsibilities

• Collaborate with development and cloud platform teams to plan security requirements in SSDLC.
• Recommend cloud security best practices and automate baselines (e.g. CIS Benchmarks).
• Implement automated security tooling in CI pipelines to validate requirements.
• Coordinate with external organisations for penetration tests.
• Review outputs from security tools and translate into deliverable security stories for delivery teams.
• Verify implementation of security principles, patterns and requirements.
• Promote cyber security practices within Agile delivery teams.
• Mentor and develop junior team members.

Job description

Kainos is seeking a Senior Security Engineer to partner with development and cloud teams to design and implement secure, cloud-based software solutions. You will embed security into the SDLC, automate security artifacts, and raise cyber security awareness across Agile teams.

You will provide SME guidance on threats, vulnerabilities, and security controls, helping to advance security maturity while coaching junior team members in a fast-paced, collaborative environment.