Security Engineer

Security Engineer (Security Partner-Devsecops) - £80,000 - £90,000 base, 15% bonus, Great benefit package We are working with a leading e-commerce firm that is looking for a Security Engineer to work as a trusted advisors to development and engineering teams. As a Security Engineer III, you will design and implement cutting-edge security tools and platforms to enhance our information security capabilities in prevention, detection, and response. Your primary objective will be to safeguard our customers, suppliers, colleagues, networks, systems, applications, and information from cyber threats, ensuring a secure and resilient environment. The team leverages DevOps and agile methodologies, employing advanced tools like Docker, Kubernetes, and microservices across Azure and AWS environments. Their security approach is real-time and event-driven, ensuring quick adaptation to the dynamic nature of modern infrastructure. Responsibilities: Build a good understanding of the aligned verticals, the technology architecture, the criteria and constraints, the security posture and technical debts. Understand the threat landscape and take a risk-based approach on security. Drive security initiatives such as developing security requirements, threat modelling, strengthening application security, vulnerability reduction, etc., across that product areas. Review architecture and design for security problems, indulge in enabling software development teams to use security capabilities and tooling provided by the company. Be ready to review critical code, build pipelines, deploy methods, etc., and assist teams in improving security overall. Facilitate risk remediation but also challenge decisions and status-quo. Facilitate in assurance activities like penetration testing, purple testing, app assurance. Build quarterly/monthly roadmaps for security activities and plan them with stakeholders. Be an evangelist for security, take part in strengthening our client's internal policies and standards. Skills and Relevant Experience: Work experience in customer-facing solutions, web technologies, payment systems, content delivery networks, REST APIs, microservices, modern application development. Good understanding of public cloud services and various architecture patterns. Good understanding of software, network and infrastructure security. Deeper understanding of application security and DevSecOps (the shift-left culture) Preferred Azure or AWS cloud security certifications Be an advocate for change. This is a unique opportunity to make a significant impact within a new and exciting team championing security. If you're passionate about security and ready to take on a leadership role in a cutting-edge environment, we invite you to join us and make a difference.