Security Engineer - London

Role: Security Engineer

Location: London, UK

My client is in the energy sector and has a vision to power the world  with clean energy for everyone. 

My client is seeking to lower collective carbon emissions to zero and is seeking a Security Engineer to help achieve this

You will be joining the Security Engineering team whose purpose is to ensure that the  Energy Platform is secure for our customers while enabling product teams to provide outstanding features.

This is a varied role where you’ll be exposed to the full stack and will work across technologies including GCP, AWS, Kubernetes and Kafka. You’ll be focusing on projects spanning infrastructure, release engineering and security monitoring.

As part of the Security Engineering team you will be  creating solutions and insights that will allow the company to meet a very high security calibre, while maintaining a fast delivery pace expected in a modern software system. You will have a strong focus on building relationships across various teams, including design feedback and coaching but most importantly building security improvements in our products.

What will I be doing?

You will be building tools and fostering security culture to help  product teams deliver secure systems. You will also be responsible for defining and evolving security best practices for the greenfield system. Helping teams take action on those practices through your expert training or automation will be key to your success.

Is this the job for me?

You will be an  excellent security engineer and whilst experience is important, ultimately less so than your demonstrated abilities and attitude.

The following skills and experience would be beneficial:

• Knowledge and experience in secure software practices
• Scripting and software engineering skills; we don’t mind what language! (Python, Scala, Clojure, Java etc.)
• Awareness of common software security flaws and web application security best practices (OWASP top 10, CWE/SANS Top 25)
• Code static analysis
• AWS/GCP security best practices
• Container vulnerability scanning
• Open Source dependency scanning
• Web application firewalls
• Logging, monitoring and alerting on security incidents
• Thorough knowledge of CI/CD and DevOps principles

Additional skills

• An inquisitive and curious approach, with confidence to tackle difficult problems
• Rapid adoptee of merit-proven new approaches & technologies
• Problem solver / structured thinker
• Always happy to help and a natural sharer of knowledge