{"id":689161,"url":"https://alion.io/job/made-tech-lead-security-engineer","title":"Lead Security Engineer","company":{"id":51462,"name":"Made Tech","domain":"madetech.com","url":"https://alion.io/company/made-tech","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":14,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bristol, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":75000,"max":100000,"currency":"GBP","period":"year","gross":null,"usd_annual":133758},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"KEV","optional":false},{"name":"Agile","optional":true},{"name":"CVE","optional":true},{"name":"Kubernetes","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"SBOM","optional":true},{"name":"Shift-Left Security","optional":true},{"name":"STRIDE","optional":true}],"status":"live","first_seen_at":"2026-09-10T00:44:26Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-29T00:37:06Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":48},"description":"Made Tech helps UK government and public sector organisations build better digital services - and security is central to that mission. As a Lead Security Engineer in our Cyber practice, you'll be the most senior security engineering voice on client engagements, setting technical direction for how organisations design, build, and defend secure systems. You'll work across complex government programmes where the stakes are real: services that affect citizens, systems that hold sensitive data, and teams that need to move quickly without cutting corners.\n\nThis isn't a role where you sit at the edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. You'll build trusted relationships with client engineering leads, platform teams, and senior stakeholders, translating between deep technical decisions and the trade-offs senior leaders need to understand. You'll bring the judgement to know when a heavyweight security architecture is warranted and when a lighter-weight, faster-moving approach serves the engagement better.\nAt Lead level, your impact extends beyond the immediate team. You'll establish security engineering standards and reference architectures across engagements, grow the technical capability of the people around you - colleagues and client engineers alike - and contribute to how Made Tech's Cyber practice develops as a community. If you'd rather build the paved road than police the off-road, who treat security as an engineering discipline rather than a compliance exercise, and who cares about leaving client teams genuinely stronger than you found them, this role is for you.\n\nKey Responsibilities\nOwn end-to-end technical security architecture across engagements. Design secure-by-default reference architectures, set patterns for identity, network, and data protection, and maintain living technical standards - feeding directly into how teams build, not just how they're audited.\n Lead vulnerability remediation as an engineering programme. Define the prioritisation framework - drawing on EPSS, KEV, CVSS, and asset criticality - set remediation SLAs, own the risk-acceptance register, and drive fixes directly into delivery backlogs alongside product teams. Report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders.\nDrive security into the team's normal engineering rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles - building the tooling and automation that make this the default, not a specialist handover at the end of a sprint.\nNavigate UK government security standards with confidence - as an engineer, not a paperwork exercise. Design systems and controls that satisfy the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, and HMG Security Policy Framework, applying them proportionately across engagements as guardrails that enable safe delivery, not barriers to it. Engage with government security communities and coordinate with departmental technical teams.\nCommunicate security risk in terms that drive engineering decisions. Report system posture, remediation programme performance, and architectural risk to senior client stakeholders - tailoring the frame for the audience and structuring reports around the decisions the reader needs to make, not just the findings.\nSet the standard for incident response and detection engineering. Build and drive adoption of detection, alerting, and IR tooling across engagements, own the IR-to-vulnerability-management feedback loop, and coordinate cross-team exercises including known-exploited-vulnerability scramble drills.\nGrow the people around you. Mentor colleagues across the practice and at client organisations, pair on complex or unfamiliar engineering problems, and create structured development opportunities - including for client engineers who may not yet have strong security habits.\nContribute to Made Tech's Cyber practice beyond delivery. Shape practice standards, contribute to hiring and technical calibration, build and share expertise externally, and help grow a security engineering community that raises capability across the organisation.\nSkills, Knowledge & Expertise\n Essential\nDeep hands-on experience designing and building secure cloud architectures (AWS, Azure, or GCP) at scale, including IAM, network segmentation, and data protection patterns.\nProven track record embedding security tooling and automation into CI/CD pipelines and engineering workflows across multiple teams.\nStrong proficiency in at least one programming/scripting language, used to build production-grade security tooling (not just scripts).\nDesirable\nThe following would strengthen your application. We don't expect every candidate to bring all of these.\n\nCertifications\nOSCP, OSWE, or equivalent offensive security credential\nAWS/Azure/GCP security specialty certification\nCKS (Certified Kubernetes Security Specialist)\n Capabilities and experience\nExperience establishing and operating vulnerability remediation programmes at organisational scale - including risk-based prioritisation using EPSS, KEV, and asset criticality, and driving fixes across multiple delivery teams.\nEvidence of designing systems that satisfy UK government security frameworks - GovAssure, CAF, Cyber Essentials, HMG Security Policy Framework - in a complex multi-supplier or multi-team environment, as an architect rather than an assessor.\nExperience conducting or coordinating technical security reviews and penetration testing in UK public sector contexts, including remediating findings and briefing senior technical stakeholders.\nWorking knowledge of exposure management beyond CVE-only approaches - incorporating misconfiguration, identity exposure, and attack-path analysis using cloud-native tooling (AWS Inspector, GuardDuty, Security Hub, or equivalents).\nExperience securing software supply chains - SBOM generation, dependency provenance, artifact signing - and integrating this into build pipelines rather than a standalone assurance process.\nExperience building or shaping security engineering capability within a consultancy, programme delivery, or multi-client environment - including growing technical skills in colleagues and client teams.\nEvidence of acting as a trusted technical adviser to senior client stakeholders - anchoring recommendations on engineering outcomes, challenging briefs constructively, and making security value visible through what gets shipped.\nExperience setting team ways of working in iterative delivery environments - establishing retrospective cadences, collaborative problem-solving norms, and pairing practices that spread security knowledge across the team.\nTooling and practice familiarity\nDeep familiarity with structured threat modelling approaches - STRIDE, MITRE ATT&CK, attack trees - and experience embedding these into agile delivery ceremonies.\nExperience integrating SAST, SCA, dependency scanning, and container security tooling into CI/CD pipelines as part of a shift-left security approach, including building custom tooling where off-the-shelf doesn't fit.\nMade Tech sponsors attainment of recognised cyber certifications for staff in scope. If you don't yet hold the listed credentials but are actively working toward them, or can demonstrate equivalent capability through your experience, we'd still welcome your application.\nJob Benefits\nWe are always listening to our growing teams and evolving the benefits available to our people. As we scale, as do our benefits and we are scaling quickly. We've recently introduced a flexible benefit platform which includes a Smart Tech scheme, Cycle to work scheme, and an individual benefits allowance which you can invest in a Health care cash plan or Pension plan. We’re also big on connection and have an optional social and wellbeing calendar of events for all employees to join should they choose to.\nHere are some of our most popular benefits listed below:\n30 days Holiday - we offer 30 days of paid annual leave\nFlexible Working Hours - we are flexible with what hours you work\nFlexible Parental Leave - we offer flexible parental leave options\nRemote Working - we offer part time remote working for all our staff\nPaid counselling - we offer paid counselling as well as financial and legal advice\nAt this point, we hope you're feeling excited about Made Tech and the job opportunity. Get in touch with our talent team if you’d like an informal chat about the role and your suitability before applying. We are hiring for this role directly, so will not respond to any CVs sent via external recruitment agencies.\nSC Eligibility\nAn increasing number of our customers are specifying a minimum of SC (security check) clearance in order to work on their projects. As a result, we're looking for all successful candidates for this role to have eligibility.\n\nEligibility for SC requires 5 years' UK residency and 5 year' employment history (or back to full-time education). Please note that if at any point during the interview process it is apparent that you may not be eligible for SC, we won't be able to progress your application and we will contact you to let you know why.\nSupport in applying\nIf you need this job description in another format, or other support in applying, please email .\n\nWe believe we can use tech to make public services better. We also believe this can happen best when our own team represents the society that actually uses the services we work on. We’re collectively continuing to grow a culture that is happy, healthy, safe and inspiring for people of all backgrounds and experiences, so we encourage people from underrepresented groups to apply for roles with us.\n\nWhen you apply, we’ll put you in touch with a member of our talent team who can help with any needs or adjustments we may need to make to help with your application. We’ve put together this blog as a resource to share more about reasonable adjustments and some examples of what this could include. We also welcome any feedback on how we can improve the experience for future candidates.\nWorking hours: Our standard hours are Monday to Friday, but the nature of this role means some work outside normal hours may be required, for example during release and change windows, planned maintenance, or to align with client operating hours. This is occasional rather than routine, and we'll always give as much notice as we can and agree it with you in advance wherever possible.","description_format":"text","description_chars":10691,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Flexible schedule","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-09-11T00:44:26Z"},{"event":"close","at":"2026-09-16T13:45:12Z"},{"event":"reopen","at":"2026-10-14T14:41:53Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-28T06:26:45+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.49,"p_room":0.35,"age_days":48,"expected_fill_days":14,"reasons":["conf:3","velocity","win:tail"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":133758,"is_top_pay":false},"html_url":"https://alion.io/job/made-tech-lead-security-engineer","json_url":"https://alion.io/job/made-tech-lead-security-engineer.json","meta":{"generated_at":"2026-10-29T04:16:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6595,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51462},"rest":"https://alion.io/mcp/rest/get_company?id=51462"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmade-tech-lead-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmade-tech-lead-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmade-tech-lead-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/made-tech-lead-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmade-tech-lead-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":689161}},{"tool":"search_jobs","arguments":{"company":"madetech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":689161},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}