Security Engineer
Listed on 2026-10-25
-
IT/Tech
Cybersecurity, Systems Engineer, Information Security & Data Protection, Security Management & Operations
Security Engineer – API, IAM & Automation
Locations:
Glasgow, Greater Manchester or Northampton (Hybrid)
Salary:
Up to £67,000 base + bonus (DOE)
We’re looking for a Security Engineer to join a growing security engineering function, helping to design and build secure, scalable systems with a strong focus on API security, automation, and identity.
This role suits someone from a Security Engineering, Dev Sec Ops , Platform Engineering or Cloud Engineering background who enjoys working close to code and infrastructure, and embedding security into the software development lifecycle.
Key Responsibilities- Design and secure APIs, including authentication, authorization, and secure communication patterns.
- Develop and maintain automation and security tooling using Python and Bash
. - Build and operate Identity & Access Management (IAM) and secrets management solutions.
- Work closely with software and platform teams to embed security into CI/CD pipelines.
- Perform vulnerability assessments and support remediation across cloud and application layers.
- Define and implement security engineering standards, patterns, and best practices.
- Contribute to audits, risk assessments, and continuous improvement of security controls.
- Strong experience with API development and API security (REST, OAuth, authentication, secure design).
- Solid programming / scripting skills in Python and Bash
. - Hands‑on experience with IAM (e.g. cloud IAM, SSO, RBAC, secrets management).
- Cloud experience with AWS and/or Azure
. - Background in Security Engineering, Dev Sec Ops , SRE, or Platform Engineering.
- Experience integrating security into CI/CD pipelines.
- Knowledge of vulnerability scanning (SAST, DAST, SCA).
- Familiarity with container and Kubernetes security.
This is an opportunity to play a key role in shaping secure-by-design engineering practices across a modern cloud and API-driven environment, with real technical ownership and influence.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).