Security Engineer

About the role

Reporting to the Principal Security Architect, the role combines application and cloud security with hands-on development, integration, and testing of practical security solutions. The engineer will translate agreed architecture and security requirements into working controls, support secure pilots and production readiness, and provide evidence for informed approval decisions.

What you'll do

• Review and help secure application and API designs, including authentication, authorization, service identities, secrets, data protection
• Perform threat modelling for new systems and significant changes, including AI workflows. Identify how data or tools could be misused
• Implement and validate cloud security controls for identity, network exposure, secrets, encryption, logging
• Build, integrate, and secure AI-enabled applications and supporting controls, including AI gateways, approved model access, retrieval-augmented generation (RAG)
• Assess AI providers and third-party tools for data flows, permissions, dependencies, retention, use of data for model training

What you need

• Incident response
• SIEM
• Cloud security
• Python
• Networking
• CI/CD

Good to have

• IPR
• Kubernetes
• Terraform