Senior Security Engineer

We're working with an established technology company looking for an experienced Senior Security Engineer to join their team and strengthen security across their applications, cloud infrastructure and engineering practices.

This is an opportunity for a hands-on security professional to take ownership of complex technical challenges, identify and resolve vulnerabilities, and implement practical improvements across a modern, cloud-based platform. You'll work closely with engineering teams to enhance application security, strengthen cloud controls and improve threat detection, while using AI tools to support efficient and effective security practices.

Please note: This is a UK remote role.

Some of the responsibilities:

• Identify, investigate and remediate security vulnerabilities across backend services, APIs, web and mobile applications, and software dependencies.

• Use AI tools to investigate code, test security hypotheses and develop independently verified security fixes.

• Strengthen AWS security across IAM, networking, ECS workloads, Lambda functions, messaging permissions and secrets management.

• Implement and maintain secure infrastructure configurations using Terraform and CloudFormation.

• Review and improve data access controls across MongoDB and Snowflake.

• Manage cloud security monitoring tools, including Wiz, to improve visibility, prioritise vulnerabilities and support remediation.

• Develop and optimise threat detection across AWS infrastructure and application logs.

• Investigate security alerts, respond to incidents and implement measures to reduce future risks.

• Assess existing security controls, identify weaknesses and prioritise improvements based on exposure and business impact.

• Evaluate and implement security tools to improve monitoring, coverage and operational efficiency.

• Integrate automated security testing and controls into CI/CD pipelines.

• Collaborate with software engineers to implement secure code changes and improve security practices across the development lifecycle.

Some of the requirements:

• Strong hands-on software engineering experience using JavaScript, TypeScript and Node.js in production environments.

• Proven experience identifying, remediating and verifying application security vulnerabilities.

• Strong understanding of application security principles, including authentication, authorisation, API security, injection vulnerabilities and SSRF.

• Practical experience securing AWS environments, including IAM, containerised workloads and serverless services.

• Experience working with infrastructure as code tools such as Terraform and CloudFormation.

• Strong understanding of threat detection, security monitoring, incident investigation and response.

• Experience using AI coding and security tools, with the ability to critically review and validate their outputs.

• Ability to implement security improvements directly through code and infrastructure changes.

• Strong problem-solving skills, with the ability to prioritise security risks and deliver effective solutions.

• Excellent communication skills and the ability to collaborate with engineering teams and technical stakeholders.

• Experience with Wiz or similar cloud security platforms would be advantageous.

• Knowledge of React, React Native, MongoDB, Snowflake or event-driven systems would be beneficial.

• Python experience and the ability to develop security tooling would be an advantage.

Interested in taking the next step in your career? Apply today.