Junior Security Engineer

Description

We are looking for a Security Engineer to help embed security practices into the software delivery lifecycle and enable teams to build and release secure products without unnecessary friction. In this role, you will work closely with engineering, product, platform, and security teams to integrate security controls, vulnerability management, and secure engineering practices into day-to-day delivery activities.

As a hands-on technical contributor, you will participate in team ceremonies, conduct security reviews, support incident response activities, and build reusable secure-by-default solutions. You will collaborate with Security Architects and other security specialists to address complex security challenges while helping teams adopt secure development practices and improve overall security maturity.

Responsibilities

• Conduct threat modelling, secure code reviews, and architecture reviews using established security standards and guidance.
• Identify attack vectors, data flow weaknesses, and authentication and authorisation gaps, and provide actionable remediation guidance.
• Perform vulnerability discovery, security testing, remediation planning, validation, and prioritisation of findings using established risk frameworks.
• Configure and maintain security scanning, pipeline gates, secret detection, Infrastructure-as-Code security scanning, and other security automation.
• Embed security into domain delivery processes through secure design patterns, reusable artefacts, templates, and security requirements.
• Participate in security incident investigation activities, including evidence gathering, root cause analysis, remediation validation, and post-incident reviews.
• Support compliance, audit readiness, threat monitoring, and security knowledge sharing across product and platform teams.

Qualifications

• Experience applying security engineering practices within software, cloud, or platform environments.
• Knowledge of secure software development principles, threat modelling, vulnerability management, and security testing approaches.
• Understanding of application, infrastructure, and cloud security risks, attack vectors, and mitigation techniques.
• Experience with authentication, authorisation, encryption, secrets management, and data protection principles.
• Familiarity with security tooling for code analysis, vulnerability identification, security testing, and monitoring activities.
• Working knowledge of cloud security controls, Infrastructure-as-Code, container technologies, modern deployment practices, and incident response processes.
• Strong analytical, problem-solving, communication, and collaboration skills, with experience implementing security controls in agile delivery environments and working with cloud technologies.