Software Security Engineer

Data Science Festival; Greater London; On-site; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Hybrid working model

Pension scheme

Generous holiday allowance

Job summary

Data Science Festival is hiring a Staff Software Security Engineer in London. The role sits within a security-first engineering culture, shaping security posture across applications and cloud infrastructure. You will embed secure practices throughout the SDLC and collaborate with software engineers and leadership.

The position offers hybrid work, high autonomy, and opportunities to influence security strategy as the company scales.

Qualifications

• Experience securing applications, cloud infrastructure and development practices.
• Strong understanding of security principles and secure SDLC.
• Ability to collaborate with software engineers and leadership.

Responsibilities

• Drive application and product security initiatives across multiple engineering teams.
• Conduct security reviews, threat modelling and risk assessments.
• Implement and improve vulnerability management processes.
• Embed security tooling into CI/CD pipelines and development workflows.
• Partner with developers to promote secure coding practices.
• Review cloud infrastructure and architecture from a security perspective.
• Support incident response and remediation activities when required.
• Define and promote security standards, policies and best practices.
• Influence technical decision-making across engineering and leadership teams.

Skills

Security engineering

Application security

DevSecOps

Cloud security

Vulnerability management

Threat modelling

CI/CD security

Stakeholder management

Tools

AWS

GCP

Azure

Terraform

Job description

Software Security Engineer

Salary: Up to £150,000 + Benefits

Location: London (Hybrid – 3 days per week in the office)

We are currently looking for a Staff Software Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data‑driven products. This is an exciting opportunity to join a highly collaborative, engineering‑led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Staff Security Engineer will play a pivotal role in shaping the organisation’s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.

This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.

The Opportunity

As the Staff Security Engineer, you’ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure‑by‑design culture across the business.

Key responsibilities include:

• Driving application and product security initiatives across multiple engineering teams
• Conducting security reviews, threat modelling and risk assessments
• Implementing and improving vulnerability management processes
• Embedding security tooling into CI/CD pipelines and development workflows
• Partnering with developers to promote secure coding practices
• Reviewing cloud infrastructure and architecture from a security perspective
• Supporting incident response and remediation activities when required
• Defining and promoting security standards, policies and best practices
• Influencing technical decision‑making across engineering and leadership teams

This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.

What’s in it for you?

• Salary up to £150,000
• Hybrid working model
• Opportunity to work on cutting‑edge AI and technology products
• High level of autonomy and influence
• Collaborative engineering culture
• Career progression opportunities as the business continues to scale
• Ongoing learning and professional development
• Pension scheme
• Generous holiday allowance

Skills and Experience

• Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer
• Strong understanding of application security principles and secure software development practices
• Experience working closely with software engineering teams
• Hands‑on experience securing cloud environments (AWS, GCP or Azure)
• Experience with vulnerability management, threat modelling and security reviews
• Knowledge of CI/CD security and modern development practices
• Excellent stakeholder management and communication skills

Eligibility

Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.

If you would like to be considered for the role and feel you would be an ideal fit, please submit your CV by clicking the Apply button below.