Senior Information Security Engineer

We're seeking an experienced Senior Security Engineer to strengthen and scale our security posture. In this role, you'll design and implement security controls, lead incident response, and partner with engineering teams to embed security into everything we build. You'll be a technical leader who balances pragmatic risk management with the realities of a fast-moving organisation.

Responsibilities:

• Design, implement, and maintain security architecture across cloud infrastructure, applications, and networks.
• Lead detection, investigation, and response for security incidents.
• Conduct threat modelling, security reviews, and risk assessments for new and existing systems.
• Build and improve security tooling, automation, and monitoring (SIEM, vulnerability scanning, etc. ).
• Develop and enforce security policies, standards, and best practices.
• Partner with engineering teams to integrate security into the SDLC and CI/CD pipelines.
• Mentor junior engineers and serve as a security subject-matter expert across the organisation.
• Support compliance efforts (e. g., SOC 2 ISO 27001 GDPR) as needed.

Requirements:

• BCHons degree in a relevant field.
• 5+ years of experience in security engineering or a closely related field.
• Strong knowledge of cloud security (AWS, GCP, or Azure) and infrastructure-as-code.
• Hands-on experience with security tooling: SIEM, IDS/IDP, vulnerability management, endpoint protection.
• Proficiency in at least one programming language (Python, Java, C#, etc. ).
• Practical experience applying OWASP standards (Top 10 ASVS) to identify and remediate application security risks.
• Solid understanding of network protocols, cryptography, and common attack vectors.
• Experience with incident response and forensic investigation.
• Strong communication skills and the ability to influence across technical and non-technical audiences.
• Relevant certifications (CISSP, OSCP, GIAC, etc. ).
• Experience in a regulated industry or with formal compliance frameworks.
• Familiarity with container and Kubernetes security.
• Background in application security or secure code review.