Lead Security Engineer

Salary: £100,000 - 100,000 per year

Requirements:

• Expertise in securing web applications and cloud platforms such as AWS and Azure.
• Experience in the defence sector.
• Current, active security clearance.
• Expertise in testing software and infrastructure security using manual or automated security tools, including performing and documenting penetration tests on web-based applications, networks, and computer systems.
• Expertise in assessing software and infrastructure source code from a security standpoint.
• Expertise in continuous security, continuous integration, and continuous delivery techniques.
• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, and SOC2.
• Knowledge of typical cyber security attack vectors such as OWASP Top 10, SQL, XSS, XXE, and MITM, with the ability to articulate threats and risks via threat modelling exercises and workshops.
• Excellent communication skills, with the ability to convey security complexities to audiences of various technical abilities.
• Demonstrated ability to manage, mentor, and coach team members and wider community.
• Good programming or scripting experience across Windows, Linux, and MacOS.
• Ability to stay up to date with new threats and attack types.
• Penetration testing qualifications such as OSCP, CREST, TIGER, or equivalent are desirable.
• Experience working with external penetration test companies to translate report findings into actionable tasks is desirable.
• Experience with security tools such as Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, and Metasploit is desirable.
• Knowledge of main cyber security areas such as OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots, IDS/IPS/WAF/AV/DLP, cryptography/PKI, IoT threats, and malware is desirable.
• Active participation in knowledge sharing activities and the security community is desirable.
• Experience of working in an agile environment is desirable.

Responsibilities:

• Lead our security engineering and security testing efforts across Kainos Platforms and Services.
• Set direction on our security testing methodology, engagement scoping, outputs, and tool and technology selections.
• Develop junior security engineers.
• Work with agile delivery teams to develop good security practices throughout the software development journey.
• Share knowledge and help educate our customers and Kainos team members on good security practices.
• Manage, coach, and develop a small number of staff, with a focus on employee performance and career development.
• Provide direction and leadership for the team while solving challenging problems together.

Technologies:

• AWS
• Azure
• Cloud
• Cryptography
• IoT
• Support
• Linux
• macOS
• Network
• OWASP
• SQL
• Security
• WAF
• Web
• Windows

More:

We are Kainos, a people-first company driven by problem solving, innovation, and collaboration, with a mission to create real impact through digital services and cutting-edge Workday solutions. We offer a diverse and ambitious team environment where creativity is valued and growth is supported. This role is for a Lead Security Engineer (Consultant) focused on our security engineering and security testing efforts across Kainos Platforms and Services. We are committed to diversity, equity, and inclusion, and we support candidates who may need accommodations or adjustments during the recruitment process.

last updated 35 week of 2026