Senior Security Software Engineer: Secure SDLC & CRA Lead

HP; Soham; Hybrid; GBP 100,000 - 150,000; Full time

Benefits offered by this job

Modern site facilities

Ergonomic workspaces

Well stocked kitchen coffee

Job summary

HP Wolf Security are seeking a Principal Security Software Engineer to strengthen Wolf Security's secure software development practices and ensure CRA compliance across the SDLC. You will lead improvements, integrate static analysis tools, and mentor engineers to elevate security standards.

Based in HP's Cambridge office with hybrid working and onsite three days per week, this role is central to advancing isolation and security tooling across Windows and Linux platforms.

Qualifications

• Strong programming experience in C, C++, Rust, Python, PowerShell.
• Experience developing software for Windows and/or Linux, including security-sensitive components.
• Experience integrating static analysis tools into build/workflows.
• Ability to lead improvements and mentor engineers in security practices.

Responsibilities

• Lead improvements to the secure software development lifecycle to align with CRA expectations.
• Introduce and integrate static analysis tools; tune rules; help teams resolve issues.
• Establish triage for findings, false positives, remediation tracking, and security metrics.
• Promote security-by-design and secure-by-default through threat modelling and secure coding practices.
• Improve vulnerability identification, assessment, remediation throughout the SDLC.
• Provide technical leadership and mentorship on complex security problems.

Skills

C

C++

Rust

Python

PowerShell

Static analysis tools

Tools

Static analysis tools

Job description

HP Wolf Security are seeking a Principal Security Software Engineer to strengthen Wolf Security's secure software development practices and ensure CRA compliance across the SDLC. You will lead improvements, integrate static analysis tools, and mentor engineers to elevate security standards.

Based in HP's Cambridge office with hybrid working and onsite three days per week, this role is central to advancing isolation and security tooling across Windows and Linux platforms.