No information about remote work conditions has been provided for this job.
Type of contract for this position: Permanent contract
The position
Job description
We are looking for a Software Engineer to lead security across our engineering teams. This is not a client-facing or product role
You will work across all of engineering, closely with our CISO, our CTO and our engineering leaders, bringing engineering skills to our security function and raising the bar on how we build securely. You will have the backing of the CTO and CISO, and real freedom to make change
We want an engineer who is drawn to security, rather than a security specialist or penetration tester who has picked up some engineering. You will start by building strong foundations, then move on to the most exciting part of the role: using AI agents to test our applications continuously
Build a clear picture of where our engineering security stands today, and agree a plan to improve it with the CTO and CISO
Bring consistent security tooling into every pipeline, including credential scanning, software composition analysis (SCA), static application security testing (SAST) and dynamic application security testing (DAST)
Configure that tooling to our standards so it helps engineers rather than creating noise they learn to ignore
Review system designs and architecture with engineering teams, applying security thinking early
Build agentic security testing: AI agents that continuously test our applications and alert engineers to issues
Work closely with our CISO and security team, turning security goals into working systems
Help engineers across the business build securely, through tooling, guidance and example
After three months: you understand our systems and how we build them, and you have agreed a clear security plan with the CTO and CISO. You have an initial view of our current engineering security posture
After six months: security scanning runs in every pipeline, tuned so that engineers trust it and act on it
After twelve months: agentic security testing is continuously testing our applications, and security is part of how every team designs and builds
Benefits
26 days holiday each calendar year
Bupa health & dental cover (including Babylon Virtual GP)
Group life insurance (4x annual salary)
Employee Assistance Program and Bereavement Counselling & Probate Helpline
Daily breakfast, drinks, fruit and snacks
Regular training & development, mini MBA series, lunch & learns
AIG Smart Health (virtual GP app)
Season Ticket Travel Card Loan and Cycle to Work Scheme
Eye test vouchers and Flu Jabs
Gym membership discounts
Regular company socials. Friday drinks
Commission plan & pension scheme
Preferred experience
We are looking for an engineer with a genuine interest in security, who wants to make it their focus and is excited by the freedom to build something from the ground up
The ability to influence engineers and win support for change without formal authority
A good understanding of secure development practices and common application vulnerabilities
Experience using AI coding tools in your day-to-day work
A genuine interest in security and a clear motivation to make it the focus of your work
Fluent written and spoken English
Strong system design skills, including reading architecture diagrams and spotting the security risks in them
Mid-level to senior experience building production systems, in any language
Experience working with CI/CD pipelines
Experience building AI agents or LLM-based automation
DevOps experience in a regulated enterprise, such as financial services
Experience introducing security tooling, such as SAST, DAST, SCA or secret scanning, into an enterprise
These job openings might interest you!
These companies are also recruiting for the position of “Software & Web Development”.