2 months ago
Remote, United Kingdom or Birmingham, United KingdomSenior
Responsibilities
- Collaborate daily with application development and cloud platform teams to plan and prioritize security requirements within the secure software development lifecycle.
- Recommend cloud security best practices and automate compliance with security baselines such as CIS Benchmarks.
- Implement automated security tooling in continuous integration pipelines to validate security requirements and identify potential issues.
- Work with external organizations to plan, scope, and facilitate penetration tests.
- Review and prioritize security-tool outputs into actionable security stories for delivery teams.
- Verify the implementation of security principles, architectural patterns, and requirements.
- Drive adoption of vulnerability management, threat modelling, and other cybersecurity practices within Agile delivery teams.
- Coach and develop more junior team members.
Requirements
- Experience implementing application security or cloud platform security.
- Experience in the Defence Sector and active security clearance.
- Detailed understanding of web application security.
- Understanding of modern cryptography, including encryption in transit, encryption at rest, hashing, and digital signatures.
- Understanding of threat modelling, vulnerability management, application security testing, and penetration testing.
- Experience integrating static and dynamic analysis tools into the secure software development lifecycle.
- Experience using Git and Bash, PowerShell, Python, Java, .NET, JavaScript, Terraform, ARM Templates, or Ansible to automate tasks.
- Ability to explain security issues to technical and non-technical audiences.
- An industry-recognized cybersecurity qualification is desirable.
- AWS or Azure mid-level certifications are desirable.
- Participation in cybersecurity communities such as OWASP, HackTheBox, or CTFs is desirable.
- Experience with Scrum or Kanban software development methodologies is desirable.
Benefits
- People-first culture with support for professional growth and development.
- Inclusive workplace committed to diversity, equity, and inclusion.
- Recruitment accommodations and adjustments available through the talent acquisition team.
About Kainos
Kainos is a Belfast-headquartered, publicly listed IT services company that designs and delivers digital services and Workday solutions for public, healthcare and commercial clients. Its business includes agile software engineering, cloud and data platforms, systems integration, and a Workday implementation and testing practice (including the Smart automated testing product). Founded in 1986 and listed on the London Stock Exchange, Kainos operates across the UK, Europe and North America.