Senior Security Engineer

Role OVO-View

Team: Security Engineering (Information Security Office)

Salary banding: £52,800 - £76,038

Experience: Expert

Reporting to: Senior Security Engineering Manager

Sponsorship: Unfortunately, we are unable to offer sponsorship for this role.

Top 3 qualities for this role: Collaborative, Integrity and Problem‑Solving Oriented

Where you’ll work: Depending on the needs of your business area, we expect hub‑based people to be in the office at least once a week, and to attend OVO Connection events in person. You’ll be assigned to the closest of our three hub offices—Bristol, Glasgow or London—unless your role requires field‑based work. Each hub has accessible spaces to keep your laptop and is designed to inspire people, help them connect and bring big ideas to life.

As an application security specialist, your primary responsibility will be to ensure the security of software applications. You will work closely with development teams to develop and implement secure coding practices and guidelines, conduct security assessments to identify vulnerabilities in existing applications, recommend mitigations, and perform code reviews to ensure new code adheres to security best practices.

• An engineer with a growth mindset who seeks to broaden soft and technology skills.
• A passion for developing products that positively impact our mission to deliver Plan Zero.
• Love working in teams, collaborating and sharing knowledge to build features that impact customers.
• Motivation to own products, from inception to continuous improvement.
• Value test automation as a key part of the role as a security engineer.
• A love of building scalable, resilient solutions.

• Cloud Native Application Protection and Cloud Security Posture Management (Wiz).
• Application Security Posture Management (Wiz Code).
• Web Application Firewall and related technologies (Cloudflare).
• GCP, AWS and Azure native security and compliance monitoring.
• SaaS discovery, event monitoring and security posture management.
• Endpoint, Cloud and Identity Detection and Response.
• Threat Modelling.
• Issue and Project Tracking (Jira).
• Cyber Asset and Attack Surface Management.
• Infrastructure Vulnerability Scanning.

• Are a creator: you’re a hands‑on Senior Engineer who builds and administers automated security verification workflows, leads by example, and leverages APIs and policy agents to pull and/or aggregate data from various sources to enrich GRC.
• Are a challenger: you embrace failure, do not shy away from difficult conversations, champion clarity about boundaries of responsibility for security work, and drive business and cyber risk strategy and security architecture alignment.
• Are a coach: you inspire your team, provide practical support and approaches to integrate with the business, educate, advise, and influence activities with cyber risk implications, and help innovate and instigate change to manage risk.

We’ll pay you between £52,800 and £76,038, depending on your specific skills and experience. You’ll be eligible for an on‑target bonus of 15% and benefit from a flexible pay arrangement with 9% Flex Pay (4% auto‑enrolled in pension; 5% available for flexible benefits or cash).

Benefits include:

• 34 days of holiday (including bank holidays).
• Healthcare cash plan or private medical insurance, critical illness cover, life assurance, health assessments.
• Wellbeing: gym membership, travel insurance, workplace ISA, will writing services, dental insurance.
• Lifestyle: extra holiday buying, discount dining, home & tech loans, support for favourite charities via give‑as‑you‑earn donations.
• Home: up to £400 towards any OVO Energy plan and discounts on solar, smart thermostats, and EV chargers.
• Commute: ultra‑low emission car leasing, cycle‑to‑work scheme, public transport season ticket loans.