Job Search

We are seeking a Senior Engineer, Cyber Security to help protect critical systems, applications and data across a complex technology environment. This role will contribute to the design, implementation and continuous improvement of cyber security controls, ensuring that security is embedded throughout the technology lifecycle. You will work closely with engineering, infrastructure, cloud, risk and operational teams to identify threats, reduce vulnerabilities and support resilient, secure services.

Key responsibilities will include developing and maintaining security architecture and engineering standards; assessing systems, networks and applications for security weaknesses; and recommending practical improvements aligned with business and regulatory requirements. You will support vulnerability management, security monitoring, incident response and the investigation of potential threats. The role will also involve reviewing technical designs, contributing to secure cloud and network solutions, supporting identity and access management controls, and helping to automate security processes through scripting or engineering tools. You will provide technical guidance to colleagues, participate in security reviews and risk assessments, and contribute to policies, procedures and assurance activities.

To succeed, you will have significant experience in cyber security engineering, ideally within a large, regulated or technically complex environment. Strong knowledge of network security, endpoint protection, identity and access management, cloud security, vulnerability management and security operations is essential. Experience with security frameworks, risk management, threat modelling, incident response and common security tooling will be highly valued. Relevant professional certifications or demonstrable equivalent experience are desirable. You will be comfortable translating complex technical risks into clear recommendations, influencing stakeholders at different levels and working collaboratively across multidisciplinary teams. A proactive, analytical approach, strong communication skills and a commitment to continuous learning are essential.

We are seeking a Principal Software Engineer (DevSecOps) to provide technical leadership across software engineering, cloud infrastructure, security, and delivery automation. You will shape engineering standards and platforms that enable teams to build, test, release, and operate secure, reliable, and scalable services. Working across architecture and delivery teams, you will influence technical strategy, promote engineering excellence, and help embed security throughout the software development lifecycle.

Your responsibilities will include defining DevSecOps practices, reference architectures, and reusable tooling; designing and improving CI/CD pipelines; and integrating automated security, compliance, quality, and performance checks into delivery workflows. You will guide the adoption of infrastructure as code, containerisation, cloud-native services, observability, and automated operational controls. You will also identify technical risks, lead complex investigations, support incident resolution, and ensure that systems are resilient, maintainable, and aligned with relevant security and regulatory expectations. As a principal-level engineer, you will mentor colleagues, facilitate technical decisions, contribute to engineering communities, and communicate effectively with both technical and non-technical stakeholders.

You will bring extensive experience in software engineering and DevSecOps, with a strong record of designing and delivering automated solutions in complex environments. Professional experience with public cloud platforms, modern programming or scripting languages, source control, CI/CD tooling, containers, Kubernetes, and infrastructure-as-code technologies is expected. You should understand secure coding principles, threat modelling, vulnerability management, identity and access management, secrets protection, and software supply-chain security. Experience implementing security tooling such as static and dynamic analysis, dependency scanning, container scanning, and policy-as-code will be highly valued. Strong problem-solving, communication, influencing, and technical leadership skills are essential, together with the ability to balance delivery priorities, risk, cost, and long-term maintainability.