Senior Security Engineer

Senior Software Cyber Security Engineer - Edinburgh (1–2 days per week)

Excellent Salary + Bonus + Outstanding Benefits

We're partnering with an innovative technology organisation developing mission‑critical software used to protect people, organisations and critical infrastructure. Due to continued growth, they're looking for an experienced Senior Software Cyber Security Engineer to help embed security throughout the software development lifecycle.

The Role

You'll act as the security lead across software engineering teams, ensuring applications and cloud platforms are secure by design while driving best practice across DevSecOps, vulnerability management and secure development.

Key Responsibilities

• Lead threat modelling and security architecture reviews
• Drive secure SDLC and DevSecOps best practices
• Embed security tooling into CI/CD pipelines (SAST, DAST, SCA, Secret Scanning)
• Perform code reviews and vulnerability assessments
• Support Kubernetes, container and cloud security initiatives
• Work closely with engineering teams to improve product security
• Investigate and prioritise security vulnerabilities and incidents
• Ensure products align with industry standards including NIST and OWASP

What We're Looking For

• 7+ years' experience in Application or Product Security
• Strong knowledge of AWS, Azure or GCP, Docker and Kubernetes
• Experience with CI/CD security and DevSecOps
• Knowledge of threat modelling methodologies (STRIDE, PASTA etc.)
• Strong understanding of IAM, cryptography and secure coding
• Software development experience (Go and/or C# desirable)
• Familiarity with security frameworks such as NIST, OWASP and ISO27001
• Cloud security certifications (CCSP, AWS Security, CCAK, CISSP, OSCP, GIAC)
• Experience with SIEM platforms such as Splunk

Package

• Competitive salary + annual bonus
• 25 days holiday + bank holidays
• Private medical insurance
• Employee share scheme
• Flexible hybrid working
• Ongoing training and career development

If you're passionate about building secure software and want to influence security across modern cloud‑native products, we'd love to hear from you.