Senior Security Engineer

Salary: £90,000 - 90,000 per year

Requirements:

• We need experience implementing application security or cloud platform security.
• We need experience in the Defence sector and active Security Clearance.
• We need a detailed understanding of web application security.
• We need an understanding of modern cryptography and its application for encryption in transit, encryption at rest, hashing, and digital signatures.
• We need an understanding of security practices such as threat modelling, vulnerability management, application security testing, and penetration testing.
• We need experience integrating application security tools such as static analysis and dynamic analysis into the SSDLC.
• We need experience using modern version control systems such as git and either a scripting language, a programming language, or an Infrastructure as Code language to automate tasks.
• We need the ability to convey security issues to technical and non-technical people.
• Desirable: an industry-recognised qualification in Cyber Security.
• Desirable: AWS or Azure mid-level certifications.
• Desirable: participation in the cyber security community such as OWASP, HackTheBox, or CTFs.
• Desirable: experience working with agile software development methodologies such as Scrum or Kanban.

Responsibilities:

• We work closely with our technology teams to design and implement secure, cloud-based software solutions for our clients.
• We implement DevSecOps practices throughout the software development lifecycle.
• We embed security practices such as vulnerability management and threat modelling.
• We automate security artifact generation such as secret scanning, container security, SAST, and DAST.
• We provide subject matter expertise in application security or cloud security.
• We share knowledge on threats and vulnerabilities, identify appropriate security controls, and increase cyber security awareness within teams.
• We collaborate daily with application development and cloud platform teams to plan and prioritise security requirements as part of the secure software development lifecycle.
• We recommend security best practices for cloud platforms and automate compliance with cloud security baselines such as CIS Benchmarks.
• We implement automated security tooling within CI pipelines to validate security requirements and identify potential issues.
• We work with external organisations to plan, scope, and facilitate penetration tests.
• We review outputs from security tools and security practices and filter and prioritise them into security stories for delivery teams.
• We verify the implementation of security principles, architectural patterns, and requirements.
• We drive the adoption of cyber security practices within Agile delivery teams.
• We coach and develop more junior members of the team.

Technologies:

• AWS
• Azure
• Cloud
• Cryptography
• DevSecOps
• Git
• Support
• Kanban
• OWASP
• REST
• Security
• Web
• ARM
• ASP.NET
• Ansible
• Bash
• Java
• PowerShell
• Python
• Terraform

More:

We are Kainos, a people-first company where our problem solvers, innovators, and collaborators create real impact by transforming digital services, delivering Workday solutions, and pushing the boundaries of technology. We value creativity, collaboration, and growth, and we are committed to building a diverse, inclusive team where everyone can thrive. As part of our hiring process, our friendly talent acquisition team can support candidates who need accommodations or adjustments.

last updated 34 week of 2026