Secure Software Engineer
">
This role involves securing the software development life cycle, focusing on application security. The ideal candidate has a deep understanding of software development and experience with cloud-native systems.
">
Main Responsibilities
">
* Embed security controls across distributed systems from source to production.
* Architect security measures for cloud-native environments.
* Lead threat modeling and security reviews.
* Pen-test services and infrastructure.
* Extend security automation and monitoring using tools like CircleCI, GitHub Actions, and AWS Security Hub.
* Harden container runtimes, APIs, and artifact pipelines.
* Write secure code, review others' code, and help teams improve their secure coding practices.
">
Requirements
">
* A background in software development, preferably with Python and TypeScript experience.
* Deep knowledge of application security and experience with SAST, DAST, RASP, and cloud security.
* Familiarity with container security, API security, IaC, and CI/CD.
* Hands-on experience with pen testing, threat modeling, and building security tools.
* Experience with securing artifact systems or supply chains is highly valued.
* The ability to work with engineering teams to secure the SDLC without blocking progress.
">
Location
">
This role is based in the UK or Ireland, with remote work options available. A valid work permit is required, and sponsorship is not provided.