Senior Security Software Engineer - CI/CD & Cloud

Avaloq Group; City of Edinburgh; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Flexible working

Job summary

Avaloq in Edinburgh is seeking a Senior Software Engineer for the Security Assurance team to design, build and evolve automation that embeds security across the SDLC. You will create scalable CI/CD pipelines, tooling and APIs to support vulnerability management in cloud-native environments.

You will collaborate with software, DevOps and security engineers to reduce risk, improve secure coding practices and drive automated security testing across source code, dependencies and containers.

Qualifications

• Strong experience building CI/CD, automation and developer tooling.
• Solid knowledge of application security and vulnerability management, including secure SDLC.
• Experience with Docker and Kubernetes and/or OpenShift; familiarity with OCI or cloud tech is a plus.
• Good analytical and problem-solving skills; able to deliver reliable security solutions.
• Strong communication and collaboration skills across teams.

Responsibilities

• Design, develop and maintain CI/CD pipelines, automation tooling, backend services and APIs for security assurance.
• Integrate automated security scanning across the SDLC for code, dependencies and containers.
• Monitor validation processes, assess vulnerabilities and support remediation.
• Develop automated vulnerability processing, reporting and event-driven workflows; integrate with Jira.
• Build security solutions for containerized and cloud-native environments (Kubernetes, OpenShift, OCI).

Skills

CI/CD pipelines

Automation tooling

Developer tooling

Docker & Kubernetes

OCI cloud

Security testing

Vulnerability management

Communication

Education

Information Technology, Computer Science, Mathematics, Physics degree

Tools

Docker

Kubernetes

OpenShift

OCI

Job description

Avaloq in Edinburgh is seeking a Senior Software Engineer for the Security Assurance team to design, build and evolve automation that embeds security across the SDLC. You will create scalable CI/CD pipelines, tooling and APIs to support vulnerability management in cloud-native environments.

You will collaborate with software, DevOps and security engineers to reduce risk, improve secure coding practices and drive automated security testing across source code, dependencies and containers.