Senior Software Security Engineer

Senior Software Cybersecurity Engineer - Uxbridge or Edinburgh (Hybrid)

Are you a Senior Cybersecurity Engineer with strong AppSec, DevSecOps, Cloud and Kubernetes experience ?

I'm currently working on an exciting opportunity, supporting the Avigilon security team in protecting the software, cloud platforms and intellectual property behind their physical and video security solutions.

This is a hands-on role where you'll work closely with software engineering teams to identify vulnerabilities, improve security throughout the SDLC and build secure-by-design solutions .

What you'll be doing

• Conduct threat modelling, risk assessments and security architecture reviews
• Assess security across cloud and Kubernetes/container environments
• Embed SAST, DAST, SCA, SBOM and secret scanning into CI/CD pipelines
• Perform security code reviews and provide secure coding guidance
• Define security requirements and support engineering teams with secure-by-design practices
• Drive vulnerability management , particularly across Kubernetes and container images
• Triage and validate vulnerabilities, including developing PoCs where appropriate
• Manage IAM and key management controls
• Support product security incident response, root-cause analysis and remediation
• Develop detection engineering capabilities, IDS/IPS rules and technical runbooks
• Monitor emerging threats and continuously improve security controls
• Work across engineering, security and compliance teams to drive security improvements

You'll ideally have:

• 7+ years' experience in Cybersecurity, Application Security or Security Engineering
• Hands-on experience with AWS, Azure or GCP
• Strong Kubernetes and Docker/container security knowledge
• Experience integrating SAST, DAST, SCA and security tooling into CI/CD
• Strong understanding of threat modelling, IAM, cryptography and application security
• Experience with Go and/or C# development
• Knowledge of HTTP, REST, TLS and TCP/IP
• Strong understanding of OWASP, NIST, ISO 27001 and CIS
• Excellent communication skills with the ability to work closely with developers and technical stakeholders

Experience with:

• Vulnerability research / exploit development
• Manual penetration testing
• Cloud, web, embedded or mobile security
• Splunk / OSQuery
• AI/ML security
• Distributed systems
• AWS Security Specialty, OSCP, CISSP, CCSP, CCAK or SANS/GIAC certifications

Why consider it?

You’ll join a global technology organisation developing mission-critical security and video technologies used to help protect people, property and communities worldwide.

You’ll have the opportunity to work at the intersection of:

Application Security | Cloud Security | Kubernetes | DevSecOps | Vulnerability Research | Product Security with strong career development, flexible working and an excellent benefits package.

#J-18808-Ljbffr