Senior Software Cybersecurity Engineer

• Experience & Education: 7+ years in Security/Application Engineering; Bachelor's degree in Computer Science, Information Security, or a related field.
• Leadership: Proven track record in leading process change, mentoring on secure-by-design principles, and driving continuous improvement.
• Cloud & Container Security: Strong knowledge of orchestration (AWS, Azure, GCP, Docker, Kubernetes) and container image vulnerability lifecycles.
• AppSec & DevSecOps: Deep understanding of threat modeling (STRIDE, PASTA), IAM, cryptography, web/network protocols (HTTP, REST, TLS, TCP/IP), and integrating security tooling (SCA, SAST, DAST) into CI/CD pipelines.
• Software Engineering: Hands-on development experience, specifically in Go and C#.
• Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides).
• Advanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/web/embedded/mobile), SIEM/logging platforms (Splunk, OSQuery), AI/ML security, and distributed systems.
• Education & Certifications: Master's degree preferred; Cloud/Security certifications (CCSP, CCAK, AWS Security Specialty, OSCP, CISSP, SANS/GIAC).
• Soft Skills: Strong communication across technical and non-technical groups, calm under pressure, and experience in high-growth SaaS environments.

In return for your expertise, we'll support you in this new challenge with coaching & development every step of the way. Also, to reward your hard work you'll get:

• Competitive salary and bonus schemes

• Two weeks additional pay per year (holiday bonus).

• 25 days holiday entitlement + bank holidays.

• Attractive defined contribution pension scheme.

• Private medical insurance.

• Employee stock purchase plan.

• Flexible working options.

• Life assurance.

• Enhanced maternity and paternity pay.

• Career development support and wide ranging learning opportunities.

• Employee health and wellbeing support EAP, wellbeing guidance etc.

• Carbon neutral initiatives/goals.

• Corporate social responsibility initiatives including support for volunteering days.

• Well known companies discount scheme.

None

This role is hybrid, 2 days a week in our Uxbridge or Edinburgh offices.

The Senior Software Cybersecurity Engineer will analyze software designs and implementations and recommend secure code improvements, identify and triage security vulnerabilities, model secure by design practices, and lead security improvements for the SDLC.

Please note Visa sponsorship is not provided for this particular opportunity.

Experienced

Under 10%

The Avigilon security team, which you will be a key member of, is responsible for maintaining and implementing security controls for all confidential and intellectual property data across our physical security and video security platform, within the Avigilon organization.

• Perform threat modeling, risk assessments, audits, and architecture reviews, focusing on Cloud and container environments.
• Manage Key Management and IAM controls.
• Partner with engineering teams by defining security requirements to meet compliance standards and industry best practices.
• Perform security code reviews and act as a technical SME for engineering and compliance teams.
• Deploy and manage automated security tools (SCA/SBOM, SAST, DAST, Secret Scanning) within CI/CD pipelines.
• Apply manual network/application testing, custom scripting, and unit test cases to validate controls.
• Recommend improvements to existing security tools, processes, and secure coding standards.
• Drive vulnerability management with a focus on Kubernetes (K8s) and container images.
• Triage, validate (including writing PoCs), and prioritize scanning tool findings.
• Communicate security issues to stakeholders and manage remediation throughout the SDLC
• Support product security incident response, including root cause analysis, mitigation strategies, and creation of technical runbooks.
• Apply Detection Engineering principles, setting baseline app security parameters and maintaining IDS/IPS rules.
• Conduct post-incident analysis and lessons learned and refine response strategies.
• Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP, NIST).

Yes