Security Engineer

• deliver a face-to-face service to support clients across West Lothian
• build rapport and help people understand the benefits they may be entitled to
• treat all clients with dignity, fairness and respect
• travel and work across neighbouring Local Authority areas to meet client demand

Client Support Advisor

• The Application Security Manager has an important role and is responsible for ensuring TSB applications and third party products are developed and maintained is a secure way protects that Bank from threats.
• Spearhead the red teaming across our software application estate, including mobile, web, cloud and API's - orchestrating a comprehensive assessment along with simulated attacks to ultimately ensure a fortified security posture and inspire confidence into the TSB business.
• Work closely with Business Value Streams and 3rd party suppliers to ensure application risks are identified, resolved and reported appropriately.
• Support the business in meeting the Bank’s security standards as part of the system development lifecycle and proactively work with many areas of the wider Group to continually detect, respond and remediate application threats and weakness.

Application Security Manager

• Own security in our AWS environment: IAM and least privilege, network segmentation, encryption, logging and detection (GuardDuty, Security Hub, CloudTrail), fixing what you find.
• Build security into the development pipeline: secrets management, dependency and container scanning, code review for risky changes, threat modeling with the engineers.
• Automate. Detection rules, alerting, compliance evidence, IaC guardrails. If a control can be code instead of a meeting, make it code.
• Run vulnerability management and incident response.
• Write the runbooks, run the drills.
• Set the rules for our AI and LLM use: which data goes to which vendors, which models are approved, how prompts and outputs are handled and logged.
• Assess risks like prompt injection and data leakage, design controls that let people keep working.
• Own SOC 2: control design, automated evidence collection, the auditor relationship.
• Handle regulatory side for our financial-institution customers: GDPR and CCPA for privacy, DORA and EBA outsourcing guidelines in the EU, GLBA and SEC/FINRA expectations in the US.
• Lead customer security reviews: due diligence questionnaires, RFPs, contract security terms, calls with bank security teams.
• Run vendor reviews and third-party risk.
• Secure the human half by building awareness training, phishing resilience, and device and identity hygiene that work for deals and sales people, not only engineers.
• Over time: set the security strategy, report risk to leadership in business terms, choose tooling, build a budget, hire.

Information Security Engineer – CISO Track

• Configuration as Code: Drive security configurations across our stack utilising a Terraform and GitOps workflow.
• Tooling Optimisation: Get the most out of our InfoSec tooling through proactive setup, tuning, and configuration, ensuring we maximise our defensive utility and continuously improve our security posture.
• Platform Integrations: Build and maintain high-leverage integrations between cloud providers, SaaS platforms, and our core security tooling - for example, engineering log pipelines into our SIEM or automating evidence feeds into our compliance platform.
• Automation Engineering: Architect and deploy agentic workflows and lean automation scripts to eliminate manual toil, driving productivity and scalability for the InfoSec team.
• Frictionless Control Implementation: Design and deploy practical guardrails, CASB, and data loss prevention (DLP) policies across network boundaries and collaboration tools – for example, Google Workspace. Your focus is on safeguarding data and enabling safe tooling usage without creating engineering bottlenecks.

Senior Security Engineer

• Own customer security assurance, ensuring enterprise security questionnaires, due diligence requests, and audit inquiries are handled accurately
• Drive the day-to-day operation and continuous improvement of compliance programs, including ISO 27001, SOC 2, TISAX
• Serve as subject matter expert during audits and ensure audit readiness
• Transform compliance from point-in-time activity to continuous process with automation and AI
• Design and improve AI-enabled GRC workflows
• Strengthen vendor risk management program by scaling security assessments
• Contribute to the continuous improvement of security awareness program

Information Security Governance Specialist

• Design and implement security controls for iOS applications and SDKs.
• Develop protections against reverse engineering, runtime manipulation, code injection, dynamic instrumentation, and application tampering.
• Implement and enhance jailbreak detection, application integrity validation, and runtime protection mechanisms.
• Design secure approaches for protecting sensitive data, cryptographic assets, and biometric-related workflows.
• Define and promote mobile security best practices across engineering teams.
• Research emerging mobile attack techniques targeting biometric identity verification systems, including runtime manipulation, device compromise, and application abuse.
• Evaluate, prototype, and implement Runtime Application Self-Protection (RASP) controls for iOS applications and SDKs.
• Assess the effectiveness of commercial and custom mobile protection technologies against evolving threats.
• Develop novel approaches to application integrity, runtime trust assessment, anti-tampering, anti-debugging, and anti-instrumentation controls.
• Investigate bypass techniques used by attackers and security researchers to identify gaps in existing protections.
• Perform security architecture reviews and code reviews.
• Assess security implications of new platform capabilities, third-party libraries, and architectural changes.
• Build security tooling, frameworks, and libraries that improve the security posture of iOS products.
• Contribute to security standards, design patterns, and technical guidance for mobile development teams.
• Participate in strategic security initiatives and long-term product security planning.

Senior iOS Security Engineer – ProdSec

• Designing and building security observability capabilities that provide meaningful visibility across systems, infrastructure and applications
• Developing automated control monitoring, evidence collection and continuous testing solutions that strengthen security governance
• Partnering with engineering, data and technology teams to embed effective security controls into products and platforms
• Driving improvements in security event monitoring, exposure management and alerting capabilities
• Conducting security reviews of new products, services and technology initiatives
• Building meaningful security metrics and reporting that support informed decision-making
• Supporting the evolution of security policies, standards and technical guardrails through automation and measurable outcomes
• Contributing to access governance and security control assurance activities across both human and non-human identities
• Acting as a technical leader and trusted security advisor, helping raise standards across the wider technology organisation

Staff Security Engineer

• Conduct cybersecurity maturity and risk assessment for clients
• Advise clients on cybersecurity strategy, metrics, and reporting
• Build risk management practices for clients, including policies and procedures
• Manage cybersecurity training & awareness services for clients from design to implementation.

Cybersecurity Manager

• Conduct cybersecurity maturity and risk assessment for clients
• Practical experience implementing security controls, in areas such as MDR, IAM, Network Security, Cloud Deployments.
• Advise clients on cybersecurity strategy, metrics and reporting for various levels of stakeholders, including Audit Committees and Board of Directors.
• Build risk management practices for clients, including policies, procedures, Risk Register, etc.
• Guide clients in establishing cybersecurity policies, standards, and procedures.
• Manage cybersecurity training & awareness services for clients from design to implementation.
• Understanding of security analysis, security events, and penetration testing.

Senior Manager, Cybersecurity

• Lead and support the delivery of cyber and information security assessments, audits, and control reviews across diverse industries.
• Identify and assess security control weaknesses, articulate associated risks, and provide pragmatic recommendations tailored to client environments.
• Produce high-quality, concise documentation including audit reports, risk assessments, and advisory outputs.
• Collaborate with technical and business stakeholders to design or enhance security control environments aligned to frameworks such as ISO 27001, NIST CSF, CIS Controls, and Cyber Essentials.
• Maintain up-to-date knowledge of cyber threats, mitigation strategies, regulatory requirements, and industry best practices.
• Contribute to the continuous improvement of internal methodologies and security services.
• Build and maintain strong client relationships with a service-focused mindset.
• Identify client challenges and future needs that may lead to service expansion opportunities.
• Contribute to business development and client growth by supporting proposal creation, project scoping, thought leadership (e.g., blogs, webinars), and collaborating on presentations, tenders, and workshops with senior team members.
• A proactive, client-oriented mindset with a passion for continuous learning and improving security outcomes.

Cyber Security Consultant

• Collaborate with Security Engineering and Infrastructure teams to identify, remediate, and prevent security, configuration, and architectural issues across the customer's Active Directory environment.

• We are looking for an experienced, hands-on Senior Cyber Security Engineer to take technical ownership of our security tooling and controls the first dedicated cyber security hire in a growing in house IT and Security function.
• Reporting directly to the Head of IT & Security, this is a high autonomy role with a genuine voice in shaping our security strategy: not executing someone else’s playbook, but helping to write it.
• You will own the configuration, hardening and continuous improvement of our defensive stack across a modern Microsoft and Google estate, working hands on day to day while partnering with the wider business to keep a fast-growing, global organisation secure and resilient. As the function matures, there is a clear path for the right person to grow the role and, in time, a team around them.
• Security Operations & Tooling Ownership
• Incident Response & Vulnerability Execution
• Governance, Continuity & Collaboration

Senior Cyber Security Engineer

• Support the delivery of security architecture activities as part of project and delivery team
• Assist in ensuring security is considered early in the project lifecycle to enable secure-by-design outcomes
• Support the triage of new initiatives and changes, helping identify appropriate security engagement and levels of effort
• Assist in conducting security risk assessments and basic threat modelling, applying structured approaches under guidance
• Contribute to the production of security design artefacts, including
• - Security requirements
• - High-level and low-level design inputs
• - Control mappings aligned to standards and patterns
• Support the identification and documentation of security risks and potential control gaps
• Assist in communicating findings to stakeholders in a clear and structured manner
• Support governance processes by updating and maintaining security documentation based on feedback
• Assist in the preparation of security testing scope (e.g. functional testing and penetration testing)
• Contribute to repeatable and standardised security activities, including use of templates, patterns, and frameworks
• Support early-stage engagement activities (e.g. Security Impact Assessments, triage discussions)
• Continuously develop personal technical and security knowledge through hands-on experience and structured learning

Associate Security Architect

• Provide safe, efficient, and service focused delivery of 24/7/365 security operations at ABP Solent Gateway Limited (SGL)
• Oversee day to day delivery of security operations at SGL, ensuring security services are delivered and adhered to as set out in the concession agreement and security plan
• Manage a team of port security supervisors and officers
• Provide operational cover for security shifts at short notice, including nights, weekends and public holidays
• Ensure access to the port remains controlled on a 24/7/365 basis
• Promptly investigate security incidents as they occur
• Carry out random spot checks to ensure access control and patrol strategies are adhered to
• Manage the operations of the port security office
• Carry out the duties of the Deputy Port Facility Security Officer (DPFSO)
• Engage with ABP Southampton employees, MOD and port users to foster a strong security culture

Senior Security Supervisor

• Review and report on clients’ information and cyber security posture
• Develop and recommend tailored security improvement plans
• Advise on cyber security regulations, standards, and best practices
• Design, implement, and deliver security management systems and training
• Manage and deliver client implementation projects
• Work closely with internal teams and clients to translate requirements into clear business outcomes
• Confidently communicate complex technical concepts to a range of stakeholders
• Support multiple client projects simultaneously in a dynamic environment

Information Security Specialist

• Customize and configure Dynamics 365 Finance & Operations, demonstrating expertise in its data structures, frameworks, and development tools.
• Participate in all phases of the Dynamics 365 F&O implementation lifecycle, including requirements analysis, design, development, testing, deployment, and post-go-live support.
• Collaborate with business analysts and stakeholders to ensure solutions meet business needs.
• Develop, enhance, and stabilize core Dynamics 365 Finance & Operations modules.
• Extend and enhance standard Dynamics 365 modules through customizations primarily using the MS Power Platform, but also potentially using X++, C#, and integration patterns.
• Design and build integrations between F&O and external systems using Power Automate and RESTful APIs.
• Create and maintain automated workflows and approval processes using Power Automate.
• Ensure data quality and consistency for finance reporting, dashboards, and audit requirements.
• Evaluate and implement new MS Dynamics and Power Platform capabilities as they become available.

Dynamics 365 F&O Developer – Security Clearance

• Reviewing RFDs from engineers on a variety of proposed projects for security and quality.
• Pairing with the Cloud team to deploy service control policies (SCPs) in AWS to prevent undesired configurations.
• Hunting for vulnerabilities using both traditional scanning tools and LLM / AI tools in innovative and creative ways.
• Automating routine security and compliance processes to increase effectiveness and decrease busywork.
• Implementing and maintaining log pipelines for valuable event data sources like critical SaaS apps or endpoint telemetry.
• Engaging with the best red teams in the world to test and harden our detection and response capabilities.
• Building response automation to reduce the risk of advanced attacks against Teleport systems.
• Contributing to the Teleport product where we can improve the ability to defend for both us and our customers.
• Ensuring that nobody (including you) is overwhelmed with false positive / noisy alerts through a tight feedback loop.

Senior Software Engineer, Security

• Lead threat modeling across products, infrastructure, and new initiatives, identifying and prioritizing risks, attack surfaces, and vulnerabilities.
• Conduct security risk assessments and translate findings into pragmatic, risk-based remediation prioritized by impact and blast radius.
• Run security design and architecture reviews, partnering with Engineering and DevOps to reduce risk through secure design and simplicity, not just added controls.
• Partner on customer due-diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire-drilled.
• Build repeatable security workflows that embed controls into existing engineering processes instead of creating parallel ones.
• Develop and maintain clear, role-relevant security policies, standards, and procedures, and drive consensus without direct authority.
• Understand and implement controls for supply-chain risk and vulnerability management, including CI/CD enforcement and dependency hygiene, and build vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS.
• Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection.
• Strengthen endpoint and identity controls across a global, remote workforce: least privilege, phishing-resistant MFA, and privileged access controls.
• Support detection and response, partnering with our DFIR and MDR relationships and helping mature toward a proactive posture.
• Address AI security risks (prompt injection, data poisoning, model and agent governance) and help keep AI controls ahead of adoption.
• Take ownership of large, loosely defined initiatives and drive them from problem framing to operationalized program.
• Work closely with senior leadership across the firm, bringing structure to ambiguity and sequencing work against risk.
• Surface risk early, challenge assumptions, and communicate clearly to both technical teams and senior stakeholders.

• Provide key pre-sales support to the account team community.
• Propose service offerings and the supporting collateral and demonstrate capability to transition service offerings into live service delivery for your allocated customers.
• Perform workshops and present Information Security services to significant key account customers in accordance with key account management or Sales Team.
• Ensure and support the liaison to customer stakeholders and internal delivery units in the case of escalations or security incident investigation for customer-facing Information Security issues in your allocated customers.
• Assist in ensuring all security-related remedial actions internally and externally are carried out in a timely manner.
• Proactively engage the security risk management processes to assess and address any commercial or contractual impacts for any deviations from our cybersecurity policies and standards, exploring and advising on options for mitigation.
• Promote awareness of security issues and risks, to ensure our security principles are reflected in our service management goals.
• Support Lead CISM’s, making sure our security plans align to and support our customer obligations and needs.
• Support the Lead CISM’s, in proactively identifying, evaluating, and reducing account cybersecurity risks.
• Assure Computacenter managed 3rd parties and ISPs deliver in line with the Security Management Plan.
• Carry out contractual security compliance reviews on a regular basis.
• Support and conduct security incident exercises alongside customer and delivery teams.
• Assure security related changes to minimise risk to the customer and the business.
• Promote the adoption of cybersecurity policies and initiatives that improve our security maturity and ensure security is part of our account operations.
• Advise on projects or initiatives, to ensure cybersecurity risks are well managed in the delivery of change.
• Manage overall customer expectations in a complex or number of customers accounts and ensure key commitments are met.
• Ensure solutions are delivered that are consistent with the GIS Cyber Strategy and best practice.
• Provide support to other CISM’s, offering guidance and advise.
• Attain to goals that align with our mission, ensuring you are well-equipped with the skills and resources to achieve our objectives.
• Be an ambassador for the CISM team, encouraging teamwork, problem solving and sharing ideas.
• Support the effective completion of Cyber skills and capability mix in the team to meet business requirements.
• Support the review and refinement of the Services Catalogue, framework and processes for the Security Management functions.

Information Security Officer

• Customer Account Security Partnering (~ 40%)
• Provide key pre-sales support to the account team community.
• Propose service offerings and the supporting collateral and demonstrate capability to transition service offerings into live service delivery for your allocated customers
• Perform workshops and present Information Security services to significant key account customers in accordance with key account management or Sales Team
• Ensure and support the liaison to customer stakeholders and internal delivery units in the case of escalations or security incident investigation for customer-facing Information Security issues in your allocated customers
• Assist in ensuring all security-related remedial actions internally and externally are carried out in a timely manner
• Proactively engage the security risk management processes to assess and address any commercial or contractual impacts for any deviations from our cybersecurity policies and standards, exploring and advising on options for mitigation.
• Promote awareness of security issues and risks, to ensure our security principles are reflected in our service management goals.
• Support Lead CISM’s, making sure our security plans align to and support our customer obligations and needs.
• Customer Account Security Operations (~ 55%)
• Support the Lead CISM’s, in proactively identifying, evaluating, and reducing account cybersecurity risks.
• Assure Computacenter managed 3rd parties and ISPs deliver in line with the Security Management Plan
• Carry out contractual security compliance reviews on a regular basis
• Support and conduct security incident exercises alongside customer and delivery teams
• Assure security related changes to minimise risk to the customer and the business
• Promote the adoption of cybersecurity policies and initiatives that improve our security maturity and ensure security is part of our account operations.
• Advise on projects or initiatives, to ensure cybersecurity risks are well managed in the delivery of change.
• Manage overall customer expectations in a complex or number of customers accounts and ensure key commitments are met
• Ensure solutions are delivered that are consistent with the GIS Cyber Strategy and best practice
• CISM Team and Resource Management (~ 5%)
• Provide support to other CISM’s, offering guidance and advise.
• Attain to goals that align with our mission, ensuring you are well-equipped with the skills and resources to achieve our objectives.
• Be an ambassador for the CISM team, encouraging teamwork, problem solving and sharing ideas.
• Support the effective completion of Cyber skills and capability mix in the team to meet business requirements
• Support the review and refinement of the Services Catalogue, framework and processes for the Security Management functions

Security Engineer jobs in United Kingdom

See all jobs on JobTailor

Client Support Advisor

Application Security Manager

Information Security Engineer – CISO Track

Senior Security Engineer

Information Security Governance Specialist

Senior iOS Security Engineer – ProdSec

Staff Security Engineer

Cybersecurity Manager

Senior Manager, Cybersecurity

Cyber Security Consultant

Senior Security Engineer

Senior Cyber Security Engineer

Associate Security Architect

Senior Security Supervisor

Information Security Specialist

Dynamics 365 F&O Developer – Security Clearance

Senior Software Engineer, Security

Senior Security Engineer

Information Security Officer

Information Security Officer