Lead Security Engineer
A senior technical role leading security engineering and testing across a growing portfolio of platforms and services.
The Role
You will lead security engineering and testing efforts, setting direction on methodology, tooling, and engagement scoping. Working alongside agile delivery teams, you will embed good security practice throughout the software development lifecycle and help grow the skills of more junior engineers.
Day-to-day
* Lead security testing engagements, including penetration tests on web applications, networks, and infrastructure.
* Define and evolve our security testing methodology, outputs, and tool selection.
* Conduct source code reviews and embed security into CI/CD pipelines.
* Coach and develop a small team, supporting performance and career growth.
* Advise customers and colleagues on security best practice, translating complexity for varied audiences.
Experience
* Expertise securing web applications and cloud platforms (AWS or Azure).
* Hands-on experience with manual and automated security testing tools.
* Strong knowledge of security standards such as NCSC, NIST, OWASP ASVS, GDPR, and PCI.
* Familiarity with common attack vectors including OWASP Top 10, XSS, SQL injection, and MITM.
* Experience in Continuous Security, CI, and CD practices.
* Proven ability to mentor and develop team members.
* Scripting or programming experience across Windows, Linux, or macOS.
Desirable
* Penetration testing qualification such as OSCP, CREST, or TIGER.
* Experience with tools including Burp Suite, OWASP-ZAP, Nmap, Nessus, or Metasploit.
* Background working in agile delivery environments.
* Active involvement in the security community.
Package
* Share options
* Hybrid/Remote working - Belfast
* 35 days annual leave inc stat
* Enhanced pension scheme
* Private health
Please apply now if you are meeting the above criteria or contact Andrew Harrison directly.