Own and evolve vulnerability management end-to-end, from identification and triage to remediation tracking.
Embed secure design principles across mobile applications, APIs, and microservices.
Partner closely with engineering teams to remediate security issues, not just report them.
Conduct threat modelling and risk assessments to identify and prioritise vulnerabilities.
Improve security visibility, monitoring, and alerting across systems.
Define and implement security standards, best practices, and policies.
Drive DevSecOps integration, including CI/CD security tooling and automation.
Strengthen cloud security posture across AWS, GCP, or similar environments.
Support compliance requirements within regulated environments.
Introduce automation to reduce manual security overhead and improve efficiency.

7+ years of experience in security engineering or related roles.
5+ years of experience in Application Security (AppSec).
3+ years of experience in threat modelling and risk assessment.
3+ years of experience applying secure coding principles (e.g. OWASP).
2+ years of experience in DevSecOps practices, including CI/CD security integration.
2+ years of experience with container security (Docker, Kubernetes).
2+ years of experience with cryptography principles and secure implementations.
Strong experience working in cloud environments (AWS, GCP, or similar).
Proven experience collaborating with engineering teams to drive remediation.
Experience leading or owning security initiatives or projects.
Strong problem-solving skills and ability to prioritise risks effectively.

Senior Security Engineer

Key skills