Senior Security Engineer

Salary: £28,000 - 51,000 per year

Requirements:

• Experience of implementing application security or cloud platform security.
• Experience in the Defence Sector.
• Active Security Clearance.
• A detailed understanding of web application security.
• An understanding of modern cryptography and its application for encryption in transit, encryption at rest, hashing, and digital signatures.
• An understanding of security practices such as threat modelling, vulnerability management, application security testing, and penetration testing.
• Experience of integrating application security tools, such as static analysis and dynamic analysis, into the SSDLC.
• Experience of using modern version control systems, such as git, and either a scripting language, a programming language, or an Infrastructure as Code language to automate tasks.
• The ability to convey security issues to technical and non-technical people.
• Desirable: an industry-recognised qualification in Cyber Security.
• Desirable: AWS or Azure mid-level certifications.
• Desirable: participation in the cyber security community, such as OWASP, HackTheBox, or CTFs.
• Desirable: experience working with agile software development methodologies, such as Scrum or Kanban.

Responsibilities:

• Work in close collaboration with our technology teams to design and implement secure, cloud-based software solutions for our clients.
• Work as part of a multi-disciplinary Agile team.
• Implement DevSecOps practices throughout the software development lifecycle.
• Embed security practices, including vulnerability management and threat modelling.
• Automate security artifact generation, including secret scanning, container security, SAST, and DAST.
• Provide subject matter expertise in application security or cloud security.
• Share knowledge on threats and vulnerabilities.
• Identify appropriate security controls.
• Increase cyber security awareness within teams.
• Collaborate daily with application development and cloud platform teams to plan and prioritise security requirements as part of the secure software development lifecycle.
• Recommend security best practices for cloud platforms and automate compliance with cloud security baselines, such as CIS Benchmarks.
• Implement automated security tooling within a CI pipeline to validate security requirements and identify potential issues.
• Work with external organisations to plan, scope, and facilitate penetration tests.
• Review outputs from security tools and security practices.
• Filter and prioritise findings into security stories that can be understood and actioned by delivery teams.
• Verify the implementation of security principles, architectural patterns, and requirements.
• Drive the adoption of cyber security practices within Agile delivery teams.
• Coach and develop more junior members of the team.

Technologies:

• AWS
• Azure
• Cloud
• Cryptography
• DevSecOps
• Git
• Support
• Kanban
• OWASP
• REST
• Security
• Web
• ARM
• ASP.NET
• Ansible
• Bash
• Java
• PowerShell
• Python
• Terraform

More:

At Kainos, we are problem solvers, innovators, and collaborators driven by a shared mission to create real impact. We transform digital services for millions, deliver Workday solutions, and push the boundaries of technology together. We believe in a people-first culture where ideas are valued, growth is supported, and contributions truly make a difference. You will join a diverse, ambitious team that celebrates creativity and collaboration. We are committed to diversity, equity, and inclusion, and we welcome talented people from all backgrounds. Our friendly talent acquisition team is available to support candidates who need accommodations or adjustments during the recruitment process. This role is in Cyber Security.

last updated 37 week of 2026