Senior Software Cybersecurity Engineer

Company Overview

At Motorola Solutions we believe that everything starts with our people. Were a global close-knit community united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people property and places. Our solutions foster the collaboration thats critical for safer communities safer schools safer hospitals safer businesses and ultimately safer nations. Connect with a career that matters and help us build a safer future.

This role is hybrid 2 days a week in our Uxbridge or Edinburgh offices.

The Senior Software Cybersecurity Engineer will analyze software designs and implementations and recommend secure code improvements identify and triage security vulnerabilities model secure by design practices and lead security improvements for the SDLC.

Please note Visa sponsorship is not provided for this particular opportunity.

Responsibilities

Security Design and Implementation

• Perform threat modeling risk assessments audits and architecture reviews focusing on Cloud and container environments.
• Manage Key Management and IAM controls.
• Partner with engineering teams by defining security requirements to meet compliance standards and industry best practices.
• Perform security code reviews and act as a technical SME for engineering and compliance teams.

Security Testing & Dev Sec Ops

• Deploy and manage automated security tools (SCA/SBOM SAST DAST Secret Scanning) within CI/CD pipelines.
• Apply manual network/application testing custom scripting and unit test cases to validate controls.
• Recommend improvements to existing security tools processes and secure coding standards.

Vulnerability Management

• Drive vulnerability management with a focus on Kubernetes (K8s) and container images.
• Triage validate (including writing PoCs) and prioritize scanning tool findings.
• Communicate security issues to stakeholders and manage remediation throughout the SDLC

Incident Response and Compliance

• Support product security incident response including root cause analysis mitigation strategies and creation of technical runbooks.
• Apply Detection Engineering principles setting baseline app security parameters and maintaining IDS/IPS rules.
• Conduct post-incident analysis and lessons learned and refine response strategies.
• Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP NIST).

Basic Requirements & Qualifications

• Experience &
  
  Education:
  
  7 years in Security/Application Engineering;
  Bachelors degree in Computer Science Information Security or a related field.
• Leadership: Proven track record in leading process change mentoring on secure-by-design principles and driving continuous improvement.
• Cloud & Container Security: Strong knowledge of orchestration (AWS Azure GCP Docker Kubernetes) and container image vulnerability life cycles.
• App Sec & Dev Sec Ops : Deep understanding of threat modeling (STRIDE PASTA) IAM cryptography web/network protocols (HTTP REST TLS TCP/IP) and integrating security tooling (SCA SAST DAST) into CI/CD pipelines.
• Software Engineering: Hands-on development experience specifically in Go and C#.
• Standards & Frameworks: Knowledge of NIST ISO 27001 CIS and OWASP (ASVS/Testing Guides).

Desirable Qualifications

• Advanced Technical
  
  Skills:
  
  Deep vulnerability research exploit R&D manual pentesting (cloud/web/embedded/mobile) SIEM/logging platforms (Splunk OSQuery) AI/ML security and distributed systems.
• Education &
  
  Certifications:
  
  Masters degree preferred;
  Cloud/Security certifications (CCSP CCAK AWS Security Specialty OSCP CISSP SANS/GIAC).
• Soft Skills: Strong communication across technical and non-technical groups calm under pressure and experience in high-growth SaaS environments.

In return for your expertise well support you in this new challenge with coaching & development every step of the way. Also to…