Security Engineer

Job type: Permanent

Specialism: Cyber Security / Cloud Security / Dev Sec Ops

We are recruiting on behalf of a client looking to strengthen its in-house security engineering capability.

This is a hands‑on role focused on improving security across Azure, Azure Dev Ops, CI/CD pipelines and cloud infrastructure. You’ll work closely with Security, Dev Ops, Engineering and Product teams to implement and improve security controls, manage vulnerabilities and embed security throughout the software delivery lifecycle.

The focus is on practical engineering, automation and continuous improvement rather than policy development alone.

• Maintain and improve security tooling across Azure Dev Ops pipelines, including secrets scanning, SAST, dependency scanning, infrastructure-as-code scanning and container security.
• Triage security findings, support remediation and manage exceptions, ensuring risks are prioritised and tracked.
• Operate and improve Azure security controls, including Entra , RBAC/PIM, Key Vault, Log Analytics and Microsoft Defender for Cloud.
• Monitor cloud security posture, identify misconfigurations and vulnerabilities, and coordinate remediation with relevant teams.
• Support vulnerability management across applications, cloud infrastructure, containers and dependencies.
• Work with Dev Ops and Engineering teams to improve CI/CD security without creating unnecessary delivery friction.
• Automate security processes, reporting and evidence collection using tools such as Power Shell, Python, Azure CLI, Logic Apps or Functions.
• Develop and maintain security runbooks, operating procedures, dashboards and documentation.
• Support incident response and continually improve security controls based on findings and lessons learned.

• Hands‑on experience in Dev Sec Ops , cloud security engineering, security operations or a related role.
• Practical experience securing Azure environments and cloud infrastructure.
• Experience with Azure Dev Ops, CI/CD pipelines and software delivery workflows.
• Understanding of security controls including SAST, SCA/dependency scanning, secrets scanning, IaC scanning and container scanning.
• Experience with Microsoft Defender for Cloud, Entra , RBAC/PIM, Key Vault or similar security tooling.
• Ability to assess vulnerabilities, prioritise risk and work with technical teams to resolve issues.
• Scripting or automation experience using Power Shell, Python, Azure CLI or similar.
• A pragmatic approach to security, with the ability to improve controls while supporting efficient delivery.

Relevant certifications such as AZ-500, SC-100, Security+, CySA+, CISSP or CCSP are beneficial but not essential. Experience with ISO 27001, SOC 2 or NIST frameworks is also advantageous.

Join a team building stronger in‑house security capabilities, with the opportunity to take ownership of security engineering, improve cloud security and embed Dev Sec Ops  practices across the organisation.