Senior Security Engineer - Cloud, Kubernetes & DevSecOps

Copello Global; City of Edinburgh; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

Copello Global is seeking a Senior Software Cybersecurity Engineer for Edinburgh on a hybrid basis. You’ll work closely with software teams to identify vulnerabilities and build secure-by-design solutions across cloud and containerized environments.

The role requires hands-on threat modelling, security reviews, CI/CD integration of SAST/DAST/SCA, and vulnerability management with Kubernetes. Strong Go/C# development and OWASP/NIST knowledge are essential.

Qualifications

• 7+ years of experience in Cybersecurity, Application Security or Security Engineering.
• Hands-on experience with AWS, Azure or GCP.
• Strong Kubernetes and Docker/container security knowledge.
• Experience integrating SAST, DAST, SCA and security tooling into CI/CD.
• Strong understanding of threat modelling, IAM, cryptography and application security.
• Experience with Go and/or C# development.
• Knowledge of HTTP, REST, TLS and TCP/IP.
• Strong understanding of OWASP, NIST, ISO 27001 and CIS.
• Excellent communication skills with the ability to work closely with developers and technical stakeholders.
• Experience with vulnerability research / exploit development.
• Manual penetration testing.
• Cloud, web, embedded or mobile security.
• Splunk / OSQuery.
• AI/ML security.
• Distributed systems.
• AWS Security Specialty, OSCP, CISSP, CCSP, CCAK or SANS/GIAC certifications.

Responsibilities

• Conduct threat modelling, risk assessments and security architecture reviews
• Assess security across cloud and Kubernetes/container environments
• Embed SAST, DAST, SCA and secret scanning into CI/CD pipelines
• Perform security code reviews and provide secure coding guidance
• Define security requirements and support engineering teams with secure-by-design practices
• Drive vulnerability management, particularly across Kubernetes and container images
• Triage and validate vulnerabilities, including developing PoCs where appropriate
• Manage IAM and key management controls
• Support product security incident response, root-cause analysis and remediation
• Develop detection engineering capabilities, IDS/IPS rules and technical runbooks
• Monitor emerging threats and continuously improve security controls
• Work across engineering, security and compliance teams to drive security improvements

Skills

AppSec

DevSecOps

Cloud security

Kubernetes security

Threat modelling

IAM

Cryptography

Security code reviews

Go development

C# development

Tools

AWS

Azure

GCP

Kubernetes

Docker

CI/CD tooling

Job description

Copello Global is seeking a Senior Software Cybersecurity Engineer for Edinburgh on a hybrid basis. You’ll work closely with software teams to identify vulnerabilities and build secure-by-design solutions across cloud and containerized environments.

The role requires hands-on threat modelling, security reviews, CI/CD integration of SAST/DAST/SCA, and vulnerability management with Kubernetes. Strong Go/C# development and OWASP/NIST knowledge are essential.