Design and implement security solutions to protect systems, networks, and data from cyber threats across our cloud and application ecosystem.
Embed Security into Workflows (DevSecOps): Work directly with engineering teams to integrate automated security scanning (SAST, DAST, SCA) and validation into CI/CD pipelines.
Cloud Infrastructure Security: Implement security controls as code (Infrastructure as Code) to ensure our AWS environment is secure by default, including container hardening and network security groups.
Network & Web Security: Manage and optimize our Cloudflare implementation, including WAF, Zero Trust, and CDN tooling to protect our web applications.
Vulnerability Management & Incident Response: Monitor security systems, act as the primary responder for security incidents, and conduct regular security assessments, threat modeling, and code reviews.
Champion Security Culture: Act as a security consultant and mentor to software engineers, promoting secure coding practices and fostering a culture of technical excellence.
Manage External Testing: Coordinate and assist in running penetration testing, bug bounty programs, and red teaming exercises.
Requirements
Proven hands-on experience as a Security Engineer, DevSecOps Engineer, or similar technical security role.
Strong background in Software Engineering, with proficiency in programming/scripting languages to build automation and understand complex codebases. (Familiarity with Angular is highly beneficial as it is used within our estate).