Security Engineer

• Establish and enforce secure design patterns, reference architectures, and integration standards
• Evaluate product architectures for security risks during the design stage (threat modeling) and drive remediation of identified issues
• Serve as the security stakeholder for platform-level integration initiatives
• Coordinate security testing for platform components and cross-product interactions
• Contribute to application security standards and guidelines
• Partner with legal and compliance teams to ensure regulatory requirements are met
• Escalate critical security risks with clear business context and recommended remediation paths

Senior Application Security Architect

• Own how Protex devices are provisioned, accessed, secured, and kept healthy in the field
• Run and evolve our remote access fabric for edge devices
• Deploy and operate security monitoring tools across remote devices via our existing device management platform
• Own OS updates, upgrades, and kernel/driver compatibility across the fleet
• Design how a brand-new Protex device goes from box to production
• Maintain the firewall, port, and endpoint documentation we hand to customer IT and security teams
• Internal Linux infrastructure, identity, SSO, MDM where relevant, and the day-to-day systems work that keeps the engineering org and the fleet running

Edge Systems and Security Engineer

• Design and implement secure reference architectures for Enterprise AI platforms.
• Establish a definitive framework for AI vetting.
• Collaborate with cross functional partners to develop and set the long term roadmap for agentic AI identity and posture management.
• Maintain and improve enterprise security posture through high-quality code and automated infrastructure management.
• Act as a technical mentor to junior engineers and a strategic advisor to leadership.

Staff Enterprise Security Engineer, AI Security

• Design, write, test and tune detections across various platforms.
• Run structured threat hunts against recent incidents and attacker tradecraft.
• Stand on the bridge during P1 and P2 incidents.
• Build and maintain SOAR playbooks.
• Be the team’s primary technical interface to the Palo Alto managed SOC.
• Work with offensive security partners to run purple-team exercises.

Security Engineer – Cyber Defence

• Perform web, API, mobile, and infrastructure penetration testing across enterprise applications
• Identify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools
• Conduct testing in line with established methodologies and security frameworks (e.g., OWASP)
• Produce clear, structured reports outlining: vulnerabilities and root cause, business impact and risk rating, practical remediation recommendations
• Perform research into new vulnerabilities, exploits, and attack techniques to enhance testing coverage
• Support re-testing activities to validate remediation of identified issues
• Support Red Team or adversary simulation exercises when required
• Contribute to reconnaissance and attack surface mapping, Identification of potential attack paths
• Support documentation of attack paths and identified security gaps
• Assist in controlled exploitation activities under guidance, including initial access techniques and limited post-exploitation validation
• Collaborate with senior team members to understand real-world attacker behavior and techniques

Penetration Testing Analyst

• Lead and deliver CameraMatic's SOC 2 certification programme
• Build and maintain a robust information security management framework, including policies, risk registers, and controls aligned to SOC 2 Trust Service Criteria
• Manage vulnerability assessments, penetration testing programmes, and remediation tracking
• Define and enforce security policies, standards, and procedures across the organisation
• Act as the primary point of contact for customer security questionnaires, audits, and due diligence processes
• Drive a security-first culture through training, awareness programmes, and clear internal communication
• Serve as the company’s primary point of accountability for data protection obligations under GDPR and relevant UK/EU regulations
• Maintain records of processing activities, data retention policies, and data subject request processes
• Partner with the Data Protection Officer (where applicable) and legal counsel to manage privacy risk
• Conduct DPIAs for new products, features, and third-party integrations
• Manage relationships with data processors, ensuring appropriate contractual and technical safeguards are in place
• Own the corporate IT environment including Microsoft 365, SaaS applications, endpoint management, and networking
• Manage device procurement, MDM, access control, and identity management (SSO, MFA, PAM)
• Define and maintain the IT asset register, software licensing, and vendor contracts
• Ensure business continuity and disaster recovery plans are documented and tested
• Support onboarding and offboarding processes with robust access provisioning and deprovisioning workflows

Head of IT, Security & Compliance

• Provide on-going support in assisting group IT security team in the execution, managing and monitoring of global OT cybersecurity program activities across group industrial sites.
• Manage up-to date documentation of existing OT security controls, solutions, network architecture and processes to ensure compliance with global IT & OT security policies and applicable regulatory standards.
• Monitor and manage group security approved specialised OT Security passive discovery solution providing identification of assets, traffic flows, vulnerabilities and threat / anomaly detection.
• Conduct security risk analyses on segmentation of traffic flows between IT and OT network segments and vulnerabilities identified in the OT systems and components (e.g. SCADA, PLCs, HMIs, workstations, handheld and other special purpose devices).
• Monitor and manage the use of identity and access management and endpoint related security controls including hardening and USB controls/inspection.
• Ensuring all types of staff or vendor remote access into the OT networks is identified, documented and deployed using group approved secure OT remote access solution.
• Coordinate with OEM vendors to apply security updates during scheduled sanitation windows.
• Facilitate and foster cross collaboration between group IT security and local plant operations teams on new implementations to ensure a resilient OT infrastructure.
• Bridge the gap between IT security requirements and OT engineering realities, fostering a culture of shared responsibility.
• Monitor OT environments for security incidents, analyse security logs, and investigate alerts to detect and respond to cyber threats in a timely manner.
• Provide OT cybersecurity awareness training and support to Operations and engineering personnel to promote a culture of security awareness and compliance.
• Supporting execution of routine internal and external OT security assessments projects.
• Stay updated on the latest developments in industry 4.0 concepts, cybersecurity threats, trends, and technologies, and apply this knowledge to improve OT security posture.

Senior OT Security Specialist

• Own the top cloud security-focused channel partner relationships
• Drive net new and expansion revenue through our top established and strategic cloud security partners
• Recruit and onboard new security-focused partners aligning to Datadog’s Ideal Partner Profile
• Oversee Datadog Partner Agreement process and, if needed, collaborate with Datadog Legal
• Work with partners to develop partner-led insertion points, including joint solution and services offerings
• Enable and activate existing partners through training, planning and joint selling activities
• Coordinate the technical and marketing aspects of integrated partnership launches
• Host regular business reviews with partners to drive accountability and report on success metrics
• Generate partner-sourced net-new sales pipeline and revenue

Principal Partner Manager – Channels, UKI Security

• Own the security and compliance functions related to our digital sovereign commercial product offerings and environments.
• Lead technical discussions across multi-functional engineering teams, product and sales teams, as well as with third party auditors.
• Support the continuous improvement of Red Hat Product Security through designing, developing, and implementing automation at scale to enable the maturation of processes.
• Mentor and aid the growth of junior team members.
• Support the downstream integration of open-sourced projects; collaborate to develop and implement Red Hat specific capabilities from the upstream.
• Serve as an evangelist of security and compliance both inside Red Hat and externally, with partners, customers, or within the open-source community.

Senior Product Security Engineer – Sovereign Cloud

• Lead end-to-end architecture for telecom and security products, turning complex needs into scalable systems, guiding teams, and shaping technical direction.
• Shape the technical direction of the company's products and turn complex product requirements into clear, robust, and scalable solutions.
• Research and design technical approaches that meet evolving product needs, balancing quality, speed, and long-term maintainability.
• Work closely with the Technical Product Manager and Engineering feature teams to translate requirements into pragmatic architecture and implementation guidance.
• Collaborate across the organisation with stakeholders in Product Management, Professional Services, Threat Intelligence, and Pre-sales to ensure solutions are aligned to customer and business outcomes.
• Define call flows, data flows, deployment architecture, network integrations, and performance and scalability decisions.
• Drive architectural standards, make sound trade-offs, and keep the overall system coherent as it grows.

Senior Software Architect – Telecom Security

• Executing objective-driven, threat intelligence–informed Red Team operations using adversary-appropriate attack techniques, including social engineering.
• Conducting threat intelligence gathering, research, development, and execution of offensive attack techniques in support of Red Team operations.
• Performing technical testing and examinations across application, infrastructure, and enterprise environments.
• Reviewing, documenting, and reporting Red Team findings; including risk implications and recommended remediation actions.
• Supporting validation and closure of Red Team findings in collaboration with control owners and stakeholders.
• Supporting and maintaining Red Team infrastructure and develop automation through DevOps approaches.
• Researching and developing offensive security tools, scripts, and frameworks to enhance testing capabilities.
• Planning, scheduling, and supporting delivery of Red Team engagements, including milestones and reporting.
• Producing meaningful metrics and reporting related to Red Team activities and authored programs.
• Remaining informed on trends in the security industry, emerging technologies, threat actors, and attack techniques, and advise stakeholders on their relevance and impact.
• Executing responsibilities in accordance with applicable industry regulations, standards, and compliance requirements.
• Participating in cyber security incident response as required.

Principal, Technology Risk & Information Security – Red Team

• Contribute to Threat Analysis and Risk Assessment for various Dolby products from both IP security and vulnerability standpoint
• Implement, verify, and validate IP protection mechanisms
• Perform exploitability research of discovered vulnerabilities
• Work swiftly in embedded environment at the verge of operating system, applications and hardware

Senior Software Security Engineer

• Define, create and deliver Dolby’s IP Security vision and value proposition.
• Drive consensus across multiple stakeholder teams in order to obtain buy-in from those groups on proposed solutions.
• Use sound business judgment to influence and change mindsets to drive IP Security as the next frontier in driving profitability and shareholder value.
• Together with a dedicated architect, define processes and tools that Dolby engineering teams should use to develop secure code to minimize vulnerabilities in our software products.
• Understand the company and customer business ecosystem to better integrate the IP Security value proposition throughout the supply chain, while balancing the needs of both Dolby, and our customers.
• Create and maintain forward looking IP Security technology strategy.
• Define the IP Security requirements and longer-term roadmaps, ensuring Dolby’s IP is secure and protected in our partner implementations.
• Based on the defined roadmap, create and execute a tactical plan for development of security controls.
• Drive the IP and Software Security engineering teams to deliver these security controls using agile methodology, AI tools, and be adaptable to changes in the market or in the internal environment.
• Drive cross-functional teams toward common goals by effectively navigating the organization, and using IP and Software Security thought leadership to influence the process.
• Line management responsibility for a team of engineers, including hiring and onboarding, goal setting, regular 1:1s, coaching and feedback, performance management, and career development.

Engineering and Core Technology Manager – Security

• Architect and deliver enterprise cloud solutions using Microsoft Azure and Microsoft 365
• Lead automation and integration projects to improve operational efficiency
• Design and implement security controls aligned with CIS and NIST frameworks
• Manage identity and access solutions (Active Directory, Azure AD, ADFS, SAML, OAuth2)
• Oversee Azure networks and Landing Zone configurations
• Collaborate with stakeholders to define technical roadmaps and mentor colleagues
• Support mergers and acquisitions with seamless onboarding and security integration
• Drive adoption of Agile methodologies for project delivery
• Provide Level 3 technical support and act as an escalation point
• Maintain technical documentation and ensure compliance with governance standards

Enterprise Cloud – Security Architect

• Own the end-to-end security architecture for our AWS/Azure cloud environments, including networking, IAM, data encryption, and logging.
• Embed security controls into CI/CD pipelines, including automated SAST/DAST scanning, software composition analysis (SCA), and container image scanning in Kubernetes.
• Design and implement a Zero Trust architecture, including micro-segmentation, least-privilege access, and continuous device posture validation.
• Conduct threat modeling for new product features and microservices using the STRIDE or OWASP threat modeling frameworks.
• Build and maintain security-as-code using Terraform, CloudFormation, or Pulumi, ensuring all cloud resources are deployed with hardened baselines.
• Select, deploy, and manage security tooling such as CSPM, CWPP, SIEM, and SOAR platforms, integrating them with existing DevOps workflows.
• Lead the response to security incidents by performing forensic analysis on cloud workloads and recommending architectural fixes to prevent recurrence.
• Partner with legal and compliance teams to map technical controls to requirements for SOC 2, HIPAA, PCI-DSS, and GDPR.
• Design secrets management solutions using HashiCorp Vault or cloud-native key management services (KMS).
• Create and maintain architecture diagrams, runbooks, and threat models for all critical systems.
• Mentor software engineers on secure coding practices and conduct regular architecture review sessions.
• Participate in an on-call rotation for security emergencies and critical patch deployments.

Cybersecurity Architect

• Lead the design, development, and maintenance of automation for critical product security processes.
• Expand the capabilities of our existing scanning infrastructure (SAST, DAST, etc.) to cover new products, new languages, and emerging types of risk.
• Build and integrate security tools into our CI/CD pipelines to provide continuous feedback to engineers and proactively mitigate risks.
• Collaborate with other Product Security engineers and product teams to understand their needs and build robust, scalable solutions that make their work more efficient and effective.
• Serve as a subject matter expert on security automation and tooling, guiding other engineers and helping to shape our technical strategy.
• Proactively identify new opportunities for automation to reduce manual effort, improve security coverage, and secure our software supply chain.
• Work with upstream open source communities to contribute to, and leverage, new and existing security tooling.
• Document the automation you build to ensure it is maintainable, well-understood, and usable by the wider team.

See all jobs on JobTailor