Lead Security Engineer (Cybersecurity)

Location: Birmingham, West Midlands, United Kingdom, or home worker in the United Kingdom.

Company

hirify.global delivers digital services, Workday solutions, and technology platforms and services.

What you will do

• Lead security engineering and security testing across hirify.global Platforms and Services.
• Set direction for security testing methodology, engagement scoping, outputs, and tool and technology selection.
• Work with agile delivery teams to embed security practices throughout the software development lifecycle.
• Educate customers and hirify.global employees on security practices and communicate complex security topics to varied audiences.
• Manage, coach, and develop security staff, including performance management and career development.
• Solve challenging security problems and provide technical direction and leadership.

Requirements

• Expertise in securing web applications and cloud platforms such as AWS or Azure.
• Experience in the defence sector and current, active security clearance.
• Expertise in testing software and infrastructure security with manual or automated tools, including performing and documenting penetration tests on web applications, networks, and computer systems.
• Expertise in assessing software and infrastructure source code from a security perspective.
• Expertise in Continuous Security, Continuous Integration, and Continuous Delivery techniques.
• Knowledge of international security standards and regulations, including NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPAA, and SOC2.
• Knowledge of common cyber security attack vectors, including OWASP Top 10, SQL injection, XSS, XXE, and MITM, with the ability to articulate threats and risks through threat modelling exercises and workshops.
• Excellent communication skills and the ability to explain security complexities to audiences with different technical abilities.
• Demonstrated ability to manage, mentor, and coach team members and the wider community.
• Good programming or scripting experience across Windows, Linux, and macOS.
• Ability to stay current with new threats and attack types.

Nice to have

• Penetration testing qualifications such as OSCP, CREST, TIGER, or equivalent.
• Experience working with external penetration testing companies and translating report findings into actionable tasks.
• Experience with security tools such as Burp Suite, OWASP ZAP, Nmap, Nessus, Kali, and Metasploit.
• Knowledge of cyber security areas including OSINT, network scanning, enumeration, sniffing, session hijacking, social engineering, firewalls, honeypots, IDS/IPS/WAF/AV/DLP, cryptography and PKI, IoT threats, trojans, viruses, worms, backdoors, and ransomware.
• Active participation in knowledge-sharing activities within the team and at a wider level.
• Activity in the security community, including conference speaking and external knowledge sharing.
• Experience working in an Agile environment.

Culture & Benefits

• People-first culture focused on collaboration, creativity, and shared impact.
• Commitment to diversity, equity, and inclusion.
• Support for candidate accommodations and adjustments during recruitment.