Security Engineer

• Manage security alerts, investigations and incidents across CV-Library’s technology estate
• Monitor emerging cyber threats and threat intelligence, assessing risks and recommending security-control improvements
• Lead initial security incident response, coordinating containment and remediation with technical teams
• Maintain incident records and conduct post-incident reviews
• Improve security tooling, including SIEM, endpoint protection, vulnerability management and cloud security solutions
• Own endpoint and Microsoft 365 security, including device security, conditional access and identity protection
• Define cloud infrastructure and software-delivery security standards and guardrails with Platform DevOps teams
• Manage identity and access-management processes, including provisioning, access reviews and least privilege
• Provide security guidance on infrastructure, platform and application changes
• Oversee vulnerability management and remediation
• Coordinate external penetration testing and track remediation actions
• Maintain security documentation, policies and audit evidence for ISO 27001 compliance
• Apply GDPR and data-protection principles to security controls and documentation
• Support supplier and third-party security assessments
• Assess secure use of AI technologies and promote security best practices across technical and non-technical teams
• Report directly to the Platform & Service Operations Manager

Security Engineer protecting CV-Library’s cloud platform and IT estate

Security Engineer protecting CV-Library’s cloud-native platform and internal IT estate. Managing incidents, security tooling, vulnerabilities and compliance across UK and overseas operations.

• Support production of work package descriptions and cost estimates for product bids, services and proposals
• Drive Security Assurance through the full product lifecycle
• Ensure designs are robust, compliant and resilient
• Contribute to continual improvement of engineering capability
• Provide independent Information Assurance (IA) reviews and risk assessments on complex, high-impact projects
• Contribute to Leonardo’s UK-wide Security and IA community
• Shape best practice and influence security strategy
• Review and guide security risk assessments, risk mitigation plans, mitigation gap analysis and security management documentation for system Accreditation
• Prepare solution hardening guidance and security operating procedures
• Liaise with Security Accreditors and Security Assurance Coordinators in support of security Accreditation
• Work closely with multidisciplinary product teams across Electronic Warfare and Future Combat Air business areas
• Embed security into the design and development of defence solutions from concept through delivery

Senior Product Security Engineer securing Leonardo’s next-generation aerospace and defence technologies

Senior Product Security Engineer

Senior Product Security Engineer securing Leonardo’s aerospace and defence technologies. Driving product security assurance, risk assessment and accreditation across fighter aircraft and combat air systems.

• Support Amentum's UK National Security business across project delivery, engineering, architecture, and business transformation
• Deliver complex digital, engineering, and business transformation programmes across government
• Contribute throughout the full project lifecycle
• Work within multidisciplinary teams in highly secure environments
• Collaborate with diverse stakeholders on complex, multi-stakeholder initiatives
• Support projects of national importance that protect and enhance UK sovereign capability
• Undertake hands-on delivery work on customer sites
• Adapt to complex government environments and deliver high-quality outcomes
• Travel as required by programme needs

Amentum national security professionals delivering secure UK government programmes across engineering and transformation

National Security Opportunities – Multiple Disciplines

Amentum national security professionals supporting secure UK government programmes across project delivery, engineering, architecture, and business transformation. Working primarily on customer sites.

• Maintain and continuously improve the ISO 27001:2022 Information Security Management System, including policies, standards, procedures, documentation and Statement of Applicability.
• Provide security and data protection assurance for new initiatives, changes and projects, embedding security-by-design and privacy-by-design.
• Conduct information security risk assessments, prioritise threats and control gaps, track remediation and maintain the risk register.
• Define, document and drive adoption of security controls across internal systems, third parties and public networks.
• Provide governance and oversight to cyber security operations and liaise with specialist technical teams.
• Coordinate threat intelligence and vulnerability management, remediation SLAs and external providers.
• Support incident response, crisis management, operational resilience, business continuity and IT disaster recovery, including AWS cloud environments.
• Support the Data Protection Officer with UK GDPR governance, ROPA, data retention, DSARs, DPIAs and personal data breach assessments.
• Perform and govern security and data protection due diligence for suppliers, processors and critical third parties.
• Partner with auditors, regulators and payment schemes; prepare evidence and support audits, certifications and reviews including ISO 27001, CHAPS, FPS, Bacs and SWIFT CSP.
• Produce management reporting, metrics, KRIs, dashboards and committee packs on security posture, incidents, vulnerabilities, data protection and compliance.
• Act as a first point of contact for security and data protection queries, alerts and events; maintain records and documentation.
• Support security control reviews, vulnerability assessments, security awareness and data protection training.

Assistant Manager safeguarding a UK bank’s information security, data protection and cyber resilience.

Assistant Manager – Information Security

Assistant Manager safeguarding a UK bank’s information security, data protection and cyber resilience. Maintaining ISO 27001 governance, risk controls, regulatory compliance and operational resilience.

• Drive offensive security at Docker through realistic adversarial testing of products, platforms, and cloud infrastructure
• Partner with engineering, product, and leadership to turn findings into durable fixes and embed security into Docker products
• Apply penetration testing, threat modeling, and exploit development across Docker products and infrastructure
• Implement proactive security solutions across AWS, GCP, Azure, containerized environments, and AI/ML products
• Contribute to security initiatives aligned with business goals
• Implement automated security design reviews and vulnerability management programs
• Serve as a software security and architecture resource for engineering teams
• Design and implement security architecture and controls across Docker products and platforms
• Plan, scope, and execute penetration tests and red-team/adversary-emulation engagements
• Develop proof-of-concept exploits and risk-rated findings with remediation guidance; retest fixes
• Build and maintain offensive security tooling and automation
• Perform security reviews and threat modeling of designs, architectures, and code, including emerging AI products
• Write automated security tests and exploits
• Participate in rotating on-call duties, investigate threats, respond to security events, and coordinate remediation
• Educate and collaborate with engineering and product teams
• Participate in security incident response
• Support audits and compliance with SOC 2 and ISO 27xxx
• Own recurring penetration tests and adversary-emulation exercises and engage with external researchers

Senior offensive security engineer protecting Docker’s container and cloud infrastructure

Senior Security Engineer – Offensive Security

Senior offensive security engineer protecting Docker’s container, cloud, and AI products. Conducting penetration tests, threat modeling, exploit development, and adversary emulation.

• Own and operate alerting and monitoring capability through a transition period
• Maintain and improve Microsoft Sentinel, including detection rules, data connectors, and alert-noise reduction
• Operate and optimise Defender XDR and Defender for Cloud, including policy management and posture recommendations
• Maintain and extend automated security checks in delivery pipelines
• Drive vulnerability remediation with engineering squads
• Support data-loss-prevention controls
• Support safeguards for business access to and use of AI, including AI workload security and data-exposure protection
• Investigate suspicious activity in Sentinel and Defender through triage, escalation, or containment
• Support incident response, including containment, evidence gathering, and post-incident review
• Contribute to detection-as-code and infrastructure-as-code for security tooling
• Coordinate penetration tests, including scope, logistics, findings review, and remediation prioritisation

Senior Security Engineer securing Flagstone’s online savings platform with Azure and Sentinel

Senior Security Engineer – Contract

Senior Security Engineer securing Flagstone’s online savings platform across Azure, Sentinel, and Defender. Improving detection, incident response, vulnerability remediation, and security automation.

• Lead technical deployment, configuration, and integration of AISLE’s autonomous security platforms into sovereign, air-gapped, and high-security enterprise networks across the UK and EU
• Read customer and platform codebases in C/C++, Rust, Go, and Python
• Assist with vulnerability identification, patch verification, and custom security tooling integrations
• Serve as the technical feedback loop between field deployments and core Engineering/AI teams
• Translate unique operational edge cases into core platform capabilities
• Navigate customer authentication, cross-domain solutions, network constraints, and compliance frameworks
• Build trust with customer engineering, SOC, and operational leadership as a subject matter expert in vulnerability management and automated defense

Forward Deployed Engineer integrating AISLE’s autonomous vulnerability-remediation platform across UK and EU security environments

Forward Deployed Engineer – Vulnerability Management, Security

Forward Deployed Engineer deploying AISLE’s AI-powered autonomous vulnerability-remediation platform. Integrating security systems and code across UK and EU government, defense, and enterprise environments.

• Manage and maintain EXA’s information security team and program
• Maintain cybersecurity capabilities, processes, and technologies, continuously improving them as required
• Work with infrastructure and application teams to understand the technology landscape and align it with EXA Infrastructure’s security posture
• Deliver the existing cybersecurity program and present evidence for management awareness and regulatory scrutiny
• Oversee a small team responsible for security monitoring, incident management, and security technology engineering
• Maintain policies securing sensitive data and ensure information security and compliance requirements are met
• Manage outsourced security providers and ensure service quality and effectiveness
• Research new technologies and security vulnerabilities
• Champion cybersecurity risk assessment and risk acceptance across stakeholders, end users, and IT professionals
• Review and align information security risk management and mitigation plans
• Advise management on cybersecurity solutions and technologies to remediate risks
• Review and address cybersecurity incidents and oversee remedial activities
• Support change management by ensuring cybersecurity considerations are incorporated
• Communicate regularly with leaders and employees to ensure IT security policies are deployed, revised, sustained, and effectively overseen

Information Security Manager securing EXA Infrastructure’s communications, systems, and assets

Information Security Manager

Information Security Manager leading EXA Infrastructure’s cybersecurity program and team. Protecting enterprise communications, systems, and assets across hybrid cloud environments.

• Take full ownership of Valarian’s internal security posture, enterprise risk framework, and product compliance
• Embed security into the engineering culture and maintain customer trust
• Design and execute Valarian’s Zero-Trust security roadmap, policies, risk assessments, and executive reporting for leadership and the board
• Own end-to-end audit readiness for SOC 2 Type II, ISO 27001, Cyber Essentials Plus, and NIST 800-53
• Embed DevSecOps and secure SDLC practices into CI/CD pipelines
• Oversee penetration testing, red teaming, and threat modeling across core infrastructure
• Serve as the technical security authority in customer procurement reviews, vendor risk assessments, and defense customer evaluations
• Build and manage internal incident response capabilities, continuous monitoring, vulnerability management, and employee security awareness programs

Head of Information Security securing Valarian’s dual-use technology platform and enterprise operations

Head of Information Security

Head of Information Security securing Valarian’s dual-use technology platform, enterprise risk, and product compliance. Leading Zero-Trust governance, certifications, DevSecOps, and security operations.

• Run security reviews and threat modelling on product features and systems
• Turn security findings into clear, actionable guidance
• Plan and deliver security projects from design through rollout
• Build tooling and automation to make future reviews faster and cheaper
• Coordinate penetration testing and track remediation through closure
• Support recurring SOC2 and PCI compliance work, including evidence collection and remediation tracking
• Contribute to AppSec roadmap initiatives involving application threats, AI security, supply chain security, and ASPM
• Perform proactive security work, threat research, and hands-on investigations
• Work with Cloud, Infrastructure, and GRC teams on security aspects of projects
• Help shape Primer's product security strategy and architecture
• Partner with engineering teams building payments infrastructure and products

Senior Security Engineer securing Primer’s global payments infrastructure remotely

Senior Security Engineer

Senior Security Engineer securing Primer’s global payments infrastructure through threat modelling, AppSec, compliance, and automation. Remote role supporting engineering teams across eligible countries.

• Develop and lead Security Operations and Engineering teams securing global services
• Form part of the Technology Operations leadership team and set and execute the Cloud Security Strategy
• Manage vendor relationships with AWS, Wiz, CrowdStrike, Cata Networks, Cribl, and Splunk
• Adopt Agentic AI in detection and response capabilities
• Lead and support security incidents and mentor teams in incident scenarios
• Establish AI-augmented risk and vulnerability management practices
• Liaise with Data Protection, Risk, and Audit teams to meet requirements and security compliance and regulatory standards
• Develop SOC capabilities to respond to AI-based threats at machine speed
• Align technology roadmaps and establish DevSecOps best practices
• Engage with security leaders across brands to share knowledge
• Provide training, mentoring, consulting, and knowledge transfer
• Establish processes, procedures, policies, and KPI reporting for tooling and systems
• Promote continuous improvement through service enhancements and agentic automation of manual tasks

Head of Security Operations leading AI-enabled cybersecurity for Flutter’s global online services

Head of Security Operations & Engineering – Flutter Functions

Head of Security Operations leading AI-enabled cybersecurity for Flutter’s global online services. Directing SOC, cloud security, incident response, and security engineering teams.

• Lead the platform support function for an AWS-based cloud platform serving a flagship public sector client
• Direct, advise, and support the team to deliver high-quality services
• Liaise with senior internal and third-party stakeholders
• Interface with Service Architecture & Transition, Service Operations, and Programme Portfolio colleagues
• Manage opportunities, risks, escalations, and service quality
• Ensure customers receive high levels of service from Enterprise Services teams and managed suppliers
• Identify and coordinate internal and external suppliers to deliver defined outcomes
• Manage stakeholder challenges and escalations
• Own continuous improvement initiatives while protecting existing services
• Make decisions on cost reductions and supplier financial performance
• Act as the main escalation point for the Service Management team
• Mentor and line-manage Service Management community members and support succession planning
• Maintain knowledge of customer projects and change programmes
• Build partnerships across the technology organisation and share best practice
• Ensure suppliers follow ITIL standards
• Represent customers in Service Readiness reviews and assessments
• Promote customer satisfaction
• Support collaboration and career development within the IT Operations community
• Build in-house capability through a professional community of practice

Service Delivery Manager leading AWS platform support for Appvia’s public sector clients

Service Delivery Manager – Security Clearance Required

Service Delivery Manager leading AWS platform support and supplier performance for Appvia’s public sector client. Driving IT service quality, governance, risk management, and continuous improvement.

• Design and implement detection strategies for AI-specific threats including prompt injection, model extraction, data poisoning, adversarial examples, and unauthorized access to training datasets or model weights
• Build automated response playbooks and orchestration workflows to contain threats and remediate compromised inference endpoints
• Lead security incident response coordination across Cloud, AppSec, Enterprise, and AI Security teams
• Conduct forensic investigations into training pipeline attacks and model manipulation attempts
• Draft incident communications for engineering and executive leadership
• Proactively hunt sophisticated threats across GPU clusters and training infrastructure
• Analyze model outputs for signs of compromise and reproduce AI-specific vulnerabilities
• Identify visibility gaps in distributed training environments
• Build detection-as-code frameworks with version control and automated deployment
• Onboard telemetry from AI training infrastructure and inference endpoints
• Create dashboards tracking model security metrics, GPU utilization patterns, and access to sensitive research data
• Translate AI Security threat research into production detections and monitor GPU clusters for threats
• Maintain a 24/7 on-call rotation for critical AI security incidents
• Continuously improve detection coverage and automation capabilities

Security engineer protecting WRITER’s enterprise AI platform through detection and incident response

Security Engineer, Detection and Response

Security engineer protecting WRITER’s enterprise AI platform from sophisticated attacks. Building AI-specific detections, automated response, and incident investigations.

• Protect Fika’s systems, applications, computers, networks, and data from security breaches, cyber threats, and unauthorized access
• Monitor systems for vulnerabilities and implement protective security measures
• Respond to security alerts, incidents, and threats
• Maintain the confidentiality, integrity, and availability of Fika systems and data
• Support development, testing, and continuous improvement of business continuity and disaster recovery plans
• Identify, assess, and document information security risks for new and existing systems and applications
• Recommend security controls and measures to mitigate identified risks
• Support organization-wide risk management practices across departments
• Implement, maintain, and improve SIEM, EDR, antivirus, and intrusion detection and prevention systems
• Perform vulnerability assessments and penetration tests
• Maintain security documentation and reports, providing periodic updates to the Senior IT Manager
• Develop and conduct information security awareness training for current staff and new hires
• Develop, implement, and maintain information security policies, standards, and procedures
• Ensure staff compliance with information security policies and regulatory requirements
• Support annual internal and external information security audits
• Build and implement Fika’s IT Security Roadmap, including addressing findings from the GRF cybersecurity audit
• Set up and secure firewalls, VPNs, LANs, and wireless networks in program-country offices
• Review firewall rules and network security configurations and continuously monitor network activity
• Ensure laptops, tablets, and mobile devices comply with security policies, including mobile device management, patch management, and disk encryption
• Secure Fika’s Microsoft 365, Google Workspace, Azure, AWS, Box, and Salesforce environments
• Collaborate with IT teams on cloud identity and access management
• Monitor emerging cybersecurity threats, vulnerabilities, and security technologies
• Support business continuity and disaster recovery plan development, implementation, testing, and maintenance
• Participate in disaster recovery testing and ensure critical systems can be restored within agreed recovery timelines
• Support Fika Cybersecurity Incident Response Procedures

IT Security Specialist protecting Fika’s rural infrastructure nonprofit systems from cyber threats

IT Security Specialist

IT Security Specialist protecting Fika’s rural infrastructure nonprofit systems from cyber threats. Securing networks, cloud environments, endpoints, and compliance operations across global program offices.

• Lead the creation, rollout, and governance of Reckitt’s Physical Security Policy and associated global standards
• Provide oversight of security governance processes, audits, assessments, and assurance activities
• Establish and maintain a physical and technical security strategy covering CCTV, Access Control, and IDS
• Manage security governance, lifecycle management, integration, efficiency, and performance measures
• Drive global standardisation, compliance, and oversight of physical security controls across Reckitt
• Lead the European regional security team, including budget responsibility and stakeholder relationships
• Implement global security standards across manufacturing, R&D, commercial, and corporate environments
• Ensure compliance with global and local regulatory security requirements through audits, assessments, reporting frameworks, KPIs, and dashboards
• Lead enterprise security operations, supply chain risk management, and global investigations programmes
• Work closely with HR, Legal, law enforcement, and external partners
• Lead a high-performing team of Corporate Security professionals and drive enterprise-wide security risk mitigation

Head of Security Operations protecting Reckitt’s global hygiene, health, and nutrition business

Head of Security Operations

Head of Security Operations leading global physical security, investigations, and supply chain risk management. Protecting Reckitt’s people, assets, and operations across worldwide sites.

• Plan and execute authorised penetration tests across internal and external networks, systems, applications, and cloud environments
• Conduct red team exercises simulating real-world attack scenarios to evaluate people, processes, and technology controls
• Research and emulate emerging threat actor tactics, techniques, and procedures
• Develop and customise scripts, tooling, and exploits for offensive security engagements
• Assess cloud platforms, APIs, web applications, third-party integrations, and enterprise infrastructure
• Produce technical reports and present findings to technical and non-technical stakeholders
• Collaborate with IT, Cyber Security, and business teams to prioritise remediation and enhance security controls
• Partner with defensive security teams to strengthen detection and response through knowledge sharing and attack simulations
• Support development of security standards, policies, and hardening practices informed by offensive security insights

Cyber security specialist strengthening DAC Beachcroft’s law-firm defences through penetration testing and red-team exercises

Cyber Security Offensive Specialist

Cyber security specialist strengthening DAC Beachcroft’s international law-firm defences. Conducting penetration tests, red-team exercises, and vulnerability assessments across enterprise and cloud environments.

• Operate and maintain IAM services, including user lifecycle management, access requests, provisioning, deprovisioning and access changes across Microsoft Entra ID and integrated applications
• Manage identity governance and access controls, including RBAC, least-privilege access, Conditional Access and PIM
• Manage access reviews and certifications, including reviewer engagement, evidence collection, exception handling, remediation tracking and reporting
• Onboard and integrate applications into IAM/IGA, including SSO, SAML/OIDC, SCIM provisioning and secure authentication using Microsoft Entra ID
• Support application and vendor onboarding from an IAM perspective
• Maintain IAM controls and audit evidence for internal and external audits and regulatory requirements
• Deliver improvements through automation, improved workflows, better request processes, clearer ownership and enhanced reporting
• Support identity-related issues and investigations with application owners, Technology, Security and other stakeholders
• Maintain IAM documentation and operational standards, including process guides, access models, onboarding standards, control evidence and runbooks
• Support Azure identity, access management and security controls, credential lifecycle management, and Google Cloud IAM governance, engineering and automation
• Report IAM risks, control status, work in progress, blockers and remediation actions to Security leadership
• Support related control and regulatory activities, including Risk Smart Indicators and Data Subject Access Requests

IAM Security Engineer strengthening identity controls at UK fintech Allica Bank

Security Engineer – Identity and Access Management, IAM

IAM Security Engineer strengthening Microsoft Entra and cloud identity controls at UK fintech Allica Bank. Automating access governance, application onboarding and audit evidence.

• Design, implement, evolve and maintain Web Application Firewall platforms protecting critical customer-facing services at scale
• Design and continuously optimise WAF security controls, rules and policies
• Engineer WAF capabilities using Infrastructure as Code, CI/CD pipelines and policy-as-code approaches
• Contribute to platform modernisation, service improvements, refactoring, automation and technical-debt reduction
• Improve monitoring, alerting and telemetry to strengthen platform reliability and incident response
• Support diagnosis and resolution of major incidents with Security Engineering, Network and Cloud teams
• Embed secure-by-design patterns and guardrails
• Produce engineering documentation, standards, patterns, platform guidance and runbooks
• Participate in the on-call rota
• Influence technical direction and raise engineering standards across WAF and Layer 7 security services

WAF Security Engineer protecting Lloyds Banking Group’s customer-facing financial services

WAF Security Engineer

WAF Security Engineer protecting Lloyds Banking Group’s customer-facing financial services. Engineering secure, automated Web Application Firewall and Layer 7 security platforms.

• Design, implement and continuously optimise Web Application Firewall security controls
• Develop and tune WAF rules and policies to protect against emerging threats while minimising false positives
• Engineer new WAF capabilities using Infrastructure as Code, CI/CD pipelines and policy-as-code
• Contribute to platform modernisation, refactoring, automation and technical-debt reduction
• Improve monitoring, alerting and telemetry to strengthen reliability and incident response
• Diagnose and resolve major incidents with Security Engineering, Network and Cloud teams
• Embed secure-by-design patterns and guardrails for platform consumers
• Produce engineering documentation, standards, patterns, platform guidance and runbooks
• Participate in the on-call rota for critical services
• Influence technical direction and engineering standards across teams and platforms

WAF Security Engineer protecting Lloyds Banking Group’s customer-facing banking services

WAF Security Engineer protecting Lloyds Banking Group’s customer-facing banking services. Designing secure, automated Layer 7 platforms across cloud, data-centre and edge environments.

• Work within the Security Architecture and Cyber Consulting teams
• Work with clients across Financial Services, Critical National Infrastructure, and Government
• Deliver a range of Security Architecture projects at Senior Consultant level
• Provide subject matter expertise for security best practices
• Ensure confidentiality, integrity, and availability of systems and data
• Support and advise on projects and change initiatives
• Ensure projects do not negatively affect security posture, policies, procedures, or architectural blueprints
• Carry out security architecture reviews
• Report security architecture reviews to executives and key stakeholders
• Work with varied client teams to deliver security architecture as a service

Senior Security Architect delivering cloud and enterprise security solutions for Bridewell’s critical-infrastructure clients

Senior Security Architect

Senior Security Architect delivering cloud and enterprise security solutions for Bridewell’s critical-infrastructure clients. Advising Financial Services, Government, and essential-service organisations on secure architectures and compliance.

Security Engineer jobs in United Kingdom

See all jobs on JobTailor

Security Engineer

Senior Product Security Engineer

National Security Opportunities – Multiple Disciplines

Assistant Manager – Information Security

Senior Security Engineer – Offensive Security

Senior Security Engineer – Contract

Forward Deployed Engineer – Vulnerability Management, Security

Information Security Manager

Head of Information Security

Senior Security Engineer

Head of Security Operations & Engineering – Flutter Functions

Service Delivery Manager – Security Clearance Required

Security Engineer, Detection and Response

IT Security Specialist

Head of Security Operations

Cyber Security Offensive Specialist

Security Engineer – Identity and Access Management, IAM

WAF Security Engineer

WAF Security Engineer

Senior Security Architect