Job Search

We are seeking an experienced Principal Security Engineer for a 12-month fixed-term contract to provide technical leadership across a broad cybersecurity landscape. You will help define and deliver security strategies that protect critical systems, applications, data and infrastructure, while supporting the organisation’s wider technology and business objectives. This is a senior hands-on role requiring strong technical judgement, the ability to influence stakeholders, and a practical approach to managing security risk in a complex environment.

Responsibilities will include designing and reviewing secure architectures, leading threat modelling and security assessments, and embedding security controls throughout the software development and technology lifecycle. You will work closely with engineering, infrastructure, cloud, operations and risk teams to identify vulnerabilities, recommend proportionate mitigations and oversee remediation activity. The role will also involve developing security standards and patterns, contributing to incident response and investigation, supporting vulnerability management, and advising on identity, access management, encryption, network security and cloud security. You will help improve security tooling, processes and governance, communicate technical risks to senior stakeholders, and mentor security engineers and technology colleagues.

Applicants should have substantial experience in a senior security engineering, security architecture or equivalent role, together with a strong understanding of modern enterprise security principles and threat landscapes. Experience securing cloud platforms, distributed systems, APIs and production environments is highly desirable, as is familiarity with DevSecOps, infrastructure as code, containerisation and automated security testing. You should be comfortable assessing complex technical designs, balancing security with usability and delivery requirements, and translating technical issues into clear business recommendations. Relevant professional certifications or demonstrable equivalent expertise would be advantageous. Excellent communication, collaboration and problem-solving skills are essential, along with the ability to work independently, manage competing priorities and deliver meaningful outcomes within a fixed-term engagement.

We are seeking a Principal Security Operations Engineer to provide technical leadership across the design, operation and continuous improvement of security monitoring and incident response capabilities. In this role, you will help protect critical systems, applications and data by developing resilient detection strategies, improving operational processes and guiding the response to complex cyber threats. You will work closely with security architecture, infrastructure, cloud, engineering and risk teams to ensure security operations are aligned with business priorities and evolving threat landscapes.

Your responsibilities will include leading the investigation and response to high-severity security incidents, developing and tuning detections across SIEM, endpoint, identity, network and cloud platforms, and identifying opportunities to improve alert quality and reduce response times. You will establish standards for incident handling, threat hunting, log management, use-case development and operational reporting. The role will also involve mentoring security engineers and analysts, coordinating technical workstreams, contributing to playbooks and automation, and supporting post-incident reviews to strengthen controls and prevent recurrence.

Applicants should have extensive experience in security operations, incident response, threat detection or a closely related discipline, together with a strong understanding of enterprise infrastructure, cloud environments, identity services, networking and common attack techniques. Practical experience with SIEM, SOAR, EDR or comparable security technologies is essential, as is the ability to investigate events using logs, telemetry and threat intelligence. Strong scripting or automation skills, familiarity with frameworks such as MITRE ATT&CK, and relevant professional certifications are desirable. You will be an analytical and confident communicator who can influence technical decisions, explain risk clearly to varied audiences and remain effective during high-pressure incidents.

We are seeking a Principal Product Cybersecurity Assurance Engineer to lead cybersecurity assurance activities across the full product lifecycle. In this senior technical role, you will help ensure that products are designed, developed, and maintained in line with rigorous security, safety, privacy, and regulatory expectations. You will define assurance strategies, establish security requirements, and provide expert guidance from concept and architecture through development, validation, deployment, and post-release support.

Your responsibilities will include conducting product security risk assessments, threat modelling, design and architecture reviews, and assurance audits. You will evaluate security controls, identify vulnerabilities and weaknesses, and oversee the resolution of findings through effective corrective action plans. The role will involve developing and maintaining assurance processes, evidence frameworks, technical documentation, and compliance mappings against relevant industry standards and regulations. You will also support security testing activities, including penetration testing, vulnerability assessment, secure development reviews, and verification of security requirements. As a principal-level contributor, you will provide authoritative advice to engineering, product, quality, safety, privacy, and programme teams, while communicating complex technical risks clearly to senior stakeholders.

The successful candidate will have substantial experience in product cybersecurity, security assurance, systems engineering, or a closely related discipline, together with a strong understanding of secure-by-design principles and risk management. Experience applying recognised standards and frameworks such as ISO/SAE 21434, IEC 62443, NIST, ISO 27001, or equivalent is highly desirable. You should be comfortable analysing complex systems, challenging technical decisions constructively, and influencing teams without direct authority. Strong knowledge of threat modelling methods, vulnerability management, security verification, and software or hardware development lifecycles is expected. Excellent written and verbal communication skills, sound judgement, and the ability to lead cross-functional initiatives are essential. Relevant professional certifications or a degree in cybersecurity, computer science, engineering, or a related subject would be advantageous.

We are seeking a Principal Product Security Engineer to provide technical leadership across the secure design, development, and operation of products and services. In this role, you will shape product security strategy, influence engineering roadmaps, and embed security practices throughout the software development lifecycle. You will work closely with product managers, software engineers, architects, and infrastructure teams to identify risks early and deliver practical, scalable solutions that protect customers and business operations.

Your responsibilities will include leading threat modelling and security architecture reviews, defining security requirements, and advising teams on secure design patterns, authentication, authorisation, cryptography, data protection, and cloud security. You will establish and improve secure development standards, code review practices, vulnerability management processes, and security testing programmes. You will also guide the assessment and remediation of vulnerabilities, support incident response activities where product expertise is required, and help develop metrics that demonstrate security maturity and risk reduction. As a senior technical authority, you will mentor engineers, promote security awareness, and communicate complex risks clearly to both technical and non-technical stakeholders.

You will bring significant experience in product or application security, with a strong understanding of modern software engineering, distributed systems, APIs, cloud platforms, and DevSecOps practices. Experience with security testing tools, threat modelling methodologies, secure coding principles, and common application vulnerabilities is essential. The ability to influence without direct authority, manage competing priorities, and make sound risk-based decisions is important. Relevant professional certifications or equivalent practical experience are welcome. We value curiosity, clear communication, collaborative leadership, and a pragmatic approach that enables teams to build secure, reliable products without unnecessary friction.

We are seeking a Principal Product Security Engineer to provide technical leadership across the product development lifecycle and help build secure, resilient, and trustworthy digital products. In this role, you will define and evolve product security strategy, establish practical engineering standards, and influence architecture and delivery decisions from early design through deployment and ongoing improvement. You will work closely with software engineers, architects, product managers, infrastructure specialists, and leadership to identify and reduce security risk while enabling teams to deliver at pace.

Your responsibilities will include leading threat modelling, security architecture reviews, secure design assessments, and risk analysis for complex products and services. You will develop and maintain secure coding guidance, security patterns, and engineering controls, and help embed security into CI/CD pipelines, development workflows, and operational processes. You will support vulnerability management, security testing, incident response, and remediation planning, while providing expert guidance on application, cloud, API, identity, data, and supply-chain security. You will also mentor security and engineering colleagues, promote security awareness, and represent product security in technical forums and governance discussions.

We are looking for substantial experience in product, application, or software security, with a strong background in secure architecture and modern software development practices. You should be confident working with cloud platforms, APIs, distributed systems, containers, automation, and DevSecOps approaches, as well as industry-standard security frameworks and threat modelling techniques. Strong communication, influencing, and stakeholder-management skills are essential, along with the ability to explain complex risks clearly and translate them into proportionate, actionable improvements. Experience leading security initiatives across multiple teams, contributing to security strategy, and coaching engineers is highly desirable. Relevant professional certifications or equivalent practical experience are welcome.

We are seeking a Principal Security Software Engineer to provide technical leadership in the design, development, and delivery of secure, scalable software systems. In this role, you will help define security engineering strategy, establish robust development practices, and guide teams in building products that protect sensitive data and withstand evolving threats. You will work closely with software engineers, architects, product managers, and infrastructure specialists to embed security throughout the software development lifecycle.

Your responsibilities will include designing secure architectures, reviewing code and technical designs, identifying vulnerabilities, and driving remediation across applications, services, APIs, and cloud environments. You will develop security tools, frameworks, and automation that improve preventative controls, detection capabilities, and engineering efficiency. You will also contribute to threat modelling, security testing, incident response, risk assessments, and the creation of technical standards and guidance. As a senior technical authority, you will mentor engineers, influence engineering roadmaps, promote secure-by-default principles, and communicate complex security risks clearly to both technical and non-technical stakeholders.

The successful candidate will have extensive experience in software engineering and application security, with a strong understanding of secure coding practices, authentication and authorisation, cryptography, vulnerability management, and common web and cloud security risks. Proficiency in one or more modern programming languages, along with experience developing distributed systems, APIs, or security automation, is required. You should be comfortable working across cloud platforms, CI/CD pipelines, infrastructure as code, and modern development methodologies. Experience leading complex technical initiatives, influencing without direct authority, and responding to security incidents is highly desirable. Relevant security certifications or equivalent practical expertise would be advantageous. We value curiosity, sound judgement, clear communication, and a collaborative approach to solving complex security challenges.

We are seeking a Principal Cloud Security Engineer to provide strategic leadership and technical expertise across cloud security architecture, engineering, and operations. You will define and advance secure cloud patterns across major platforms, helping engineering and product teams build resilient, compliant, and scalable services. This role will influence security strategy, establish engineering standards, and serve as a trusted advisor to senior stakeholders on cloud risk and technology decisions.

Key responsibilities include designing and reviewing secure cloud architectures; developing guardrails, policies, and reusable infrastructure-as-code patterns; and embedding security controls throughout the software development lifecycle. You will lead initiatives covering identity and access management, network security, data protection, secrets management, container and Kubernetes security, vulnerability management, logging, monitoring, and incident response. You will also assess emerging technologies, perform threat modelling and security reviews, support audits and regulatory requirements, and help improve detection and response capabilities. A significant part of the role will involve mentoring engineers, promoting security best practice, and collaborating with platform, application, infrastructure, and risk teams.

You should have substantial experience in cloud security engineering or architecture, with strong knowledge of one or more leading cloud platforms and hands-on experience implementing security controls at enterprise scale. Experience with infrastructure as code, CI/CD security, automation, container platforms, identity solutions, and cloud-native monitoring is essential. You will bring a strong understanding of security frameworks, threat modelling, secure software development, and relevant regulatory principles. Professional security or cloud certifications are advantageous. We are looking for an excellent communicator who can translate complex technical risks into clear recommendations, influence without relying on authority, and balance robust security with practical delivery. The successful candidate will be comfortable working autonomously, leading complex programmes, and operating effectively in a fast-moving, collaborative environment.

We are seeking a Principal Security Engineer to provide technical leadership across the design, implementation and continuous improvement of security capabilities. This role will define and champion secure engineering practices, influence architecture decisions and help protect critical systems, applications, data and infrastructure across complex technology environments. You will work closely with engineering, platform, operations, risk and compliance teams to embed security throughout the development and delivery lifecycle.

Key responsibilities include developing security architecture and technical standards; leading threat modelling, risk assessments and design reviews; identifying vulnerabilities and driving effective remediation; and advising on cloud, application, network, identity and endpoint security. You will establish and improve security controls, monitoring and incident response capabilities, contribute to security investigations, and provide expert guidance during major technology initiatives. The role will also involve evaluating emerging threats and technologies, supporting audits and regulatory requirements, producing clear technical documentation, and mentoring security engineers and wider technical teams. You will be expected to influence senior stakeholders, balance security with usability and delivery objectives, and promote a strong culture of secure-by-design engineering.

Applicants should have extensive experience in security engineering, architecture or a closely related discipline, with a strong understanding of modern cloud platforms, networking, operating systems, identity and access management, application security and secure software development. Professional experience with vulnerability management, security tooling, automation, incident response and infrastructure-as-code is highly desirable. Relevant industry certifications or equivalent practical expertise are welcome. You should be comfortable working autonomously on complex problems, communicating technical risk to both technical and non-technical audiences, and making pragmatic decisions in a fast-moving environment. A methodical approach, sound judgement, curiosity and a commitment to continuous improvement are essential.

We are seeking a Principal Product Security Engineer to lead the integration of security throughout the product development lifecycle. In this influential role, you will define and advance product security strategy across software, cloud services, APIs, and connected technologies. You will partner with engineering, architecture, product management, privacy, and operations teams to identify risks early, establish pragmatic security requirements, and ensure that security is built into products by design.

Your responsibilities will include driving threat modelling, secure architecture reviews, vulnerability management, security testing, and risk assessments for complex products and platforms. You will develop and maintain security standards, patterns, and guidance; advise teams on secure coding and authentication, authorisation, cryptography, data protection, and cloud security; and help establish measurable security objectives and controls. You will also assess emerging technologies and threats, support incident response and root-cause analysis, and contribute to security reviews for new features, acquisitions, integrations, and significant architectural changes. Where appropriate, you will help automate security checks within CI/CD pipelines and improve the visibility and remediation of product security risks.

The successful candidate will bring significant experience in product or application security, with a strong understanding of secure software development and modern engineering practices. You should be comfortable influencing senior stakeholders and technical teams without relying on formal authority, translating complex security issues into clear business and engineering decisions. Experience with cloud platforms, APIs, containers, infrastructure as code, software supply-chain security, and common application security testing tools is highly desirable. Relevant professional certifications or equivalent practical experience are welcome. We value curiosity, sound judgement, strong communication, and a collaborative approach, along with the ability to balance security, usability, delivery timelines, and customer needs.

We are seeking a Principal Cyber Security Engineer to provide technical leadership across the design, implementation and continuous improvement of enterprise security capabilities. You will define security architecture and engineering standards, guide the adoption of secure-by-design principles, and advise technology and delivery teams on risk-based controls. The role will involve shaping security strategy, translating regulatory and business requirements into practical solutions, and acting as a senior technical authority for complex security decisions.

Key responsibilities will include leading the development of security patterns for cloud, on-premises and hybrid environments; assessing solutions, applications and infrastructure for vulnerabilities and design weaknesses; and overseeing the implementation of identity and access management, network security, endpoint protection, encryption, logging and monitoring controls. You will support threat modelling, security reviews, penetration testing and incident response, while helping to improve detection, resilience and recovery capabilities. You will also contribute to security governance, risk assessments, technical standards and remediation plans, working closely with engineering, architecture, operations, compliance and third-party teams.

The successful candidate will have substantial experience in cyber security engineering or architecture, with a strong understanding of modern infrastructure, cloud platforms, application security, networking and security operations. Relevant professional certifications or equivalent practical experience are desirable. You will be confident analysing complex technical risks, communicating clearly with both technical and non-technical stakeholders, and influencing outcomes without relying on direct authority. A track record of delivering security improvements in large or complex environments, alongside knowledge of recognised security frameworks and standards, is essential. The ability to mentor engineers, challenge existing approaches constructively and remain current with emerging threats and technologies will be central to success in this role.