Lead Security Engineer

🔥 0 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kainos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏥 Healthcare

📣 Marketing

📦 Logistics

💰 Venture Round on 1986-04

Healthcare • Marketing • Logistics

Kainos is a technology company focused on solving real problems for its customers and enhancing business operations through innovative IT solutions. With specialties in Enterprise Content Management, Application Management Services, Systems Integration, and Digital Transformation, Kainos serves clients across various sectors including healthcare, commercial, and the public domain. Their emphasis on building strong relationships and delivering impactful solutions is reflected in their two main business areas: Digital Services and Workday Practice, aimed at improving the lives of people and the functionality of organizations globally.

📋 Description

• Lead security engineering and security testing efforts across Kainos Platforms and Services • Set direction for security testing methodology, engagement scoping, outputs, and tool/technology selection • Develop junior security engineers • Work with agile delivery teams to embed good security practices throughout the software development lifecycle • Share knowledge and educate customers and Kainos team members on security practices • Manage, coach, and develop staff, focusing on performance and career development • Provide team direction and leadership while solving challenging security problems • Translate external penetration testing findings into actionable tasks

🎯 Requirements

• Expertise in securing web applications and cloud platforms such as AWS and Azure • Experience in the defence sector • Current, active security clearance • Expertise testing software and infrastructure security with manual or automated tools • Ability to perform and document penetration tests on web applications, networks, and computer systems • Expertise assessing software and infrastructure source code from a security perspective • Expertise in Continuous Security, Continuous Integration, and Continuous Delivery techniques • Knowledge of security standards and regulations including NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPAA, and SOC2 • Knowledge of cyber security attack vectors including OWASP Top 10, SQL injection, XSS, XXE, and MITM • Ability to articulate threats and risks through threat modelling exercises and workshops • Excellent communication skills for explaining security complexities to audiences with varying technical abilities • Demonstrated ability to manage, mentor, and coach team members • Good programming or scripting experience across Windows, Linux, and macOS • Keeps up to date with new threats and attack types • Desirable: penetration testing qualification such as OSCP, CREST, TIGER, or equivalent • Desirable: experience working with external penetration testing companies • Desirable: experience with Burp Suite, OWASP ZAP, Nmap, Nessus, Kali, and Metasploit • Desirable: knowledge of OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots, IDS/IPS/WAF/AV/DLP, cryptography/PKI, IoT threats, malware, and ransomware • Desirable: active participation in knowledge-sharing activities and the security community • Desirable: experience working in an Agile environment

🏖️ Benefits

• People-first culture • Growth and career development support • Diversity, equity and inclusion commitment • Recruitment accommodations and adjustments • Benefits offered by Kainos (not specified in detail)