Security Engineer - Software Security Enablement

Salary: £55,000 - 95,000 per year

Requirements:

• A strong core engineering background with a proven track record.
• 3+ years of experience in software development.
• Strong programming experience, with working knowledge of at least one of: C/C++, Python, JavaScript/TypeScript.
• Knowledge and experience with DevOps and software used in development pipelines (e.g. Github, Jenkins).
• Working knowledge of build systems, package managers, and development tooling (such as cmake, npm, maven, gradle etc).
• A core understanding of common security vulnerabilities, such as OWASP Top 10 issues and language-specific vulnerabilities.
• Experience using, evaluating, or building with LLMs or AI-assisted tooling in technical workflows.
• Ability to combine technical knowledge with an understanding of core aspects of an information security program.
• Motivation to keep up with latest trends and techniques in the information security community.
• Excellent written and verbal communication skills.

Responsibilities:

• Partner with engineering stakeholders to understand our development landscape and security needs.
• Develop automated security solutions that integrate into development pipelines.
• Maintain and enhance existing security automation processes and security capabilities.
• Understand and research technical details of core technology stacks and develop or enhance custom code analysis queries.
• Communicate vulnerability landscape and work on mitigations with stakeholders across the business.
• Actively monitor the latest news and trends in automated security capabilities, secure development, and AI-assisted security workflows.
• Develop and enhance operational run books.
• Perform ad-hoc vulnerability discovery, including code review and static analysis for key engineering teams, applications and services.
• Build or adopt new security capabilities to address issues at scale, such as Software Composition Analysis, Secret searching, and other automated security testing techniques.
• Use LLMs and AI-assisted workflows as part of security assessments, vulnerability research, secure code review, developer enablement, and security automation.
• Explore, evaluate, and build automation using modern LLM tooling and integration patterns, including custom skills, MCP servers, agentic workflows, retrieval-augmented workflows, and integrations with development and security tooling.

Technologies:

• AI
• DevOps
• GitHub
• Gradle
• JavaScript
• Jenkins
• LLM
• Maven
• MCP
• Network
• NPM
• OWASP
• Python
• Security
• TypeScript
• AWS
• Azure
• Cloud
• Docker
• GCP
• Java
• Kubernetes
• Rust

More:

We are Bloomberg, building the worlds most trusted information network for financial professionals. Based in London, within our Legal, Compliance, and Risk business area, our Chief Information Security Office (CISO) protects Bloomberg by ensuring our products, systems, networks, and commercial applications are built and maintained with security in mind. Our Security Enablement team helps deliver automated security testing solutions across the software development lifecycle, including SAST, DAST, SCA, secret searching, and LLM-based assessments, with a focus on preventative security capabilities that integrate into development pipelines and help detect issues early. We value collaboration across a fast-paced environment and encourage interest in modern security automation, AI-assisted workflows, and secure development practices. We also note that years of experience are a guide, and we consider candidates who can demonstrate the skills necessary for the role.

last updated 40 week of 2026