Security Engineer

Job Title: Security Engineer

Location: Remote (UK)

Salary: £77,000 - £100,000 pa

Hours: Monday to Friday, 8:30am to 5pm

Contract: Permanent, full-time

Most work comes in through ConnectWise tickets, with a dispatch board for onsite visits. We started in 2012 and have grown to about 100 people. Lunch is usually whatever is closest to the client site.

Position summary:

The Application Security team is small and hands-on. We need someone who writes code and automation, not just policy. Remote position. Most of the team is in Birmingham, but nobody is required to come in.

Day to day:

• Respond to security incidents and lead the technical investigation
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Review code and pull requests for security issues
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Coordinate external penetration tests and track remediation

Qualifications:

• 3+ years in security engineering, application security or a related engineering role
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Programming or scripting ability in Python, Go or similar

Benefits:

• Workplace pension
• 33 days holiday including bank holidays
• Annual bonus

This role is subject to a basic DBS check.

We are an equal opportunities employer and welcome applications from all suitably qualified persons.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Yarrowhall IT.