Job Description:

Senior Software Cybersecurity Engineer

📍 Uxbridge or Edinburgh | Hybrid - 2 days per week
💼 Permanent | Senior Level

I'm recruiting for a Senior Software Cybersecurity Engineer to join a high-profile technology organisation, working across Application Security, Cloud, Kubernetes and DevSecOps.

The Role

You'll work closely with software engineering teams to embed security throughout the SDLC, identify vulnerabilities and improve secure-by-design practices.

Key responsibilities:

• Threat modelling, risk assessments & security architecture reviews

• Cloud & Kubernetes/container security

• Security code reviews and secure-by-design guidance

• Implementing SAST, DAST, SCA, SBOM & Secret Scanning

• Driving vulnerability management and remediation

• Vulnerability triage, validation & PoC development

• IAM and key management

• Security incident response & root-cause analysis

• Detection engineering and security automation

• Developing security standards, processes and technical runbooks

What we're looking for

• 7+ years' Cybersecurity / AppSec / Security Engineering experience

• Strong Cloud & Kubernetes security experience

• Proven DevSecOps / CI/CD security experience

• Strong knowledge of SAST, DAST, SCA & vulnerability management

• Threat modelling experience – STRIDE / PASTA

• Hands-on development experience with Go and/or C#

• Strong understanding of OWASP, NIST, ISO 27001 & CIS

• Experience with AWS, Azure or GCP

Desirable: vulnerability research, exploit development, penetration testing, Splunk/OSQuery, AI/ML security and security certifications.

Why apply?

A genuinely hands-on Product Security / AppSec opportunity combining Cloud, Kubernetes, DevSecOps and vulnerability research within a high-growth technology environment.

Interested? Get in touch for the full details.