Senior Security Enablement Engineer

• Own security engineering outcomes as a subject matter expert
• Identify cross-functional security opportunities and drive improvements through to impact
• Introduce secure-coding tooling and improve the security developer experience
• Integrate security into CI/CD pipelines, cloud environments, and code review workflows
• Establish reusable secure-by-default patterns and practices
• Prioritise process and tooling improvements against the real risk landscape
• Identify security knowledge and capability gaps across engineering
• Lead threat-modelling sessions, documentation, and hands-on pairing
• Embed with product teams during design, architecture review, and pre-launch stages
• Coach teams through complex security decisions
• Partner with Product and Engineering on security and compliance requirements
• Share security learnings, emerging threats, and incident lessons
• Monitor security signals and alerts and build shared situational awareness
• Assess emerging risks and conduct exploratory risk analysis
• Build security requirements and review processes for the AWS-hosted, multi-tenant SaaS environment
• Contribute to the on-call rota
• Support security incident response from triage and containment through post-incident review and remediation tracking

• Demonstrable hands-on secure development experience, preferably 7+ years
• Production coding experience
• Deep experience in a security engineering or application security role
• Strong working knowledge of AWS security, IAM, GuardDuty, Security Hub, WAF, and related services
• Familiarity with common vulnerability classes, OWASP, and secure SDLC frameworks
• Experience working across SaaS and multi-tenant architectures
• Comfortable using AI tools to accelerate security work while applying human judgment
• Strong written, verbal, and asynchronous communication skills
• Ability to build trust with engineering teams without relying on authority
• Ability to keep stakeholders informed and surface problems early
• Comfortable working in a distributed team and owning outcomes end to end
• Nice to have: experience in payments or regulated SaaS environments, including PCI DSS, GDPR, or HIPAA
• Nice to have: familiarity with Team Topologies or other platform/enabling team models
• Nice to have: exposure to offensive security, penetration testing, red teaming, or bug bounty
• Nice to have: experience building security enablement or champion programmes

• Private healthcare
• 2 Wellness Days
• Employee assistance program
• Free online GP service
• Competitive compensation
• Employee Share Purchase Scheme
• Pension
• Life Assurance
• Income Protection
• Bike to work scheme
• Tax saver transport tickets
• 2 weeks leave for Fertility Treatment, Pregnancy Loss and Menopause
• Enhanced Maternity and Paternity Benefits
• Great learning environment
• Extensive development opportunities
• Development programs
• Access to online resources including LinkedIn Learning
• 3 moving days
• Flexi-time
• Working from home possible
• Remote work option