You will help shape reusable security capabilities and guide teams across the application lifecycle, while contributing your expertise to the wider security practice and helping raise security standards across defence environments.
Responsibilities
Build and improve shared security foundations, tools, and patterns that teams can use across applications and services.
Help product and engineering teams design, build, and operate secure applications.
Lead threat-modelling sessions to identify threats, attack paths, and mitigations early in the development process.
Review application and system designs, then give teams clear, actionable security guidance.
Develop secure-by-default patterns for identity and access, data protection, secrets management, logging, and network controls.
Help integrate security checks into development workflows and support teams in resolving findings.
Create practical security guidance and reusable components that make secure development easier.
Work with engineering and programme teams to understand defence requirements and apply them to system design.
Mentor engineers and promote consistent application security practices.
Qualifications
Significant experience in security engineering, application security, or a related technical role.
Hands-on experience threat modelling applications or systems and helping teams act on the results.
Strong understanding of secure software design, common application vulnerabilities, identity, encryption, and APIs.
Experience building security tooling, reusable components, developer guidance, or platform capabilities.
Ability to work collaboratively with developers and explain security decisions in practical terms.
Good to have
Strong network security knowledge, including network architecture, segmentation, firewalls, and secure communications.