Lead Security Engineer

Salary: £28,000 - 51,000 per year

Requirements:

• Expertise in securing web applications and cloud platforms (e.g. AWS/Azure).
• Experience in the defence sector.
• Current, active security clearance.
• Expertise in testing software and infrastructure security using manual or automated security tools, including performing and documenting penetration tests on web-based applications, networks, and computer systems.
• Expertise in assessing software and infrastructure source code from a security standpoint.
• Expertise in continuous security, continuous integration, and continuous delivery techniques.
• Knowledge of international security standards and regulations such as NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPPA, SOC2, etc.
• Knowledge of typical cyber security attack vectors such as OWASP Top 10, SQL, XSS, XXE, and MITM, and the ability to articulate threats and risk through threat modelling exercises and workshops.
• Excellent communication skills, with the ability to convey security complexities to audiences of various technical abilities.
• Demonstrated ability to manage, mentor, and coach team members and the wider community.
• Good programming or scripting experience across Windows, Linux, and MacOS.
• Ability to stay up to date with new threats and attack types.
• Penetration testing qualifications such as OSCP, CREST, TIGER, or equivalent are desirable.
• Experience working with external penetration test companies to translate report findings into actionable tasks is desirable.
• Experience with security tools such as Burp Suite, OWASP-ZAP, NMAP, Nessus, Kali, and Metasploit is desirable.
• Knowledge of key cyber security areas such as OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots, IDS/IPS/WAF/AV/DLP, cryptography/PKI, IoT threats, and malware types is desirable.
• Active participation in knowledge sharing activities within the team and at a wider level is desirable.
• Active involvement in the security community, including conference speaking and external knowledge sharing, is desirable.
• Experience working in an Agile environment is desirable.

Responsibilities:

• Lead our security engineering and security testing efforts across Kainos Platforms and Services.
• Set direction on our security testing methodology, engagement scoping, outputs, and tool/technology selections.
• Develop our more junior security engineers.
• Work with agile delivery teams to develop good security practices throughout the software development journey.
• Share knowledge and educate our customers and Kainos team members on good security practices.
• Manage, coach, and develop a small number of staff, with a focus on employee performance and career development.
• Provide direction and leadership for the team while solving challenging problems together.

Technologies:

• AWS
• Azure
• Cloud
• Cryptography
• IoT
• Support
• Linux
• macOS
• Network
• OWASP
• SQL
• Security
• WAF
• Web
• Windows

More:

At Kainos, we are problem solvers, innovators, and collaborators driven by a shared mission to create real impact. We build digital services, deliver Workday solutions, and push the boundaries of technology together. We offer a people-first culture where ideas are valued, growth is supported, and contributions make a difference. You will join a diverse, ambitious team that celebrates creativity and collaboration. We are committed to diversity, equity, and inclusion, and we actively support candidates who need accommodations or adjustments during the recruitment process.

last updated 34 week of 2026