Senior Security Engineer for DevSecOps, Incident Response, and Vulnerability Management

Senior Security Engineer (DevSecOps & Incident Response)

An industry-leading global platform is seeking a talented Senior Security Engineer to join their growing team. This role is focused on building a secure-by-design environment, moving away from "blocking" and toward "enabling" engineers to create resilient, scalable services.

The successful candidate will report directly to the VP of Information Security and play a pivotal role in protecting data for millions of users worldwide.

The Role

• Location: Fully Remote (Must be based in the UK)
• Salary: £80,000 – £100,000 (Dependent on experience)

Key Responsibilities

• DevSecOps & Cloud: Design and harden secure AWS/GCP cloud architectures; integrate security controls into CI/CD pipelines and automate workflows using Python, PowerShell, or Bash.
• Security Operations: Develop, tune, and maintain the security stack, including SIEM, SOAR, WAF, EDR, and IAM systems.
• Incident Response: Lead end-to-end incident response—from detection and containment to investigation and post-mortem—while participating in an on-call rotation.
• Vulnerability Management: Manage the full lifecycle of vulnerabilities, conducting scans and penetration tests to enhance defense-in-depth strategies.
• Innovation: Embrace an "AI-first" mindset by leveraging LLMs and automation to streamline threat detection and repetitive analysis.

Requirements

• Experience: 7+ years in Cybersecurity, with at least 3 years focused on hands-on Incident Response or Security Operations.
• Technical Depth: Proven background in DevSecOps, network administration, or software development.
• Cloud Expertise: Hands-on experience with AWS (Security Specialty certification is highly preferred).
• Compliance: Strong understanding of security frameworks such as ISO27001, SOC2, or NIST.
• Soft Skills: resilient under pressure, and capable of communicating complex risks to senior leadership.