Security Engineer

Job Description:

Our client is looking to appoint a Security Engineer to build, integrate and maintain the security capabilities that protect its systems, data and people.

You will work closely with Infrastructure, Cloud, Development, DevOps and other security teams to embed security earlier in the technology lifecycle and reduce reliance on manual security processes.

This is a hands-on role, engineering and improving security capabilities across cloud, identity, endpoint and vulnerability management.

You will develop integrations, tooling and automation that improve security outcomes while simplifying how security is used by other teams.

Skills/Experience:

• Practical experience within Cybersecurity, Infrastructure, Cloud Engineering, Identity & Access Management, DevOps or a closely related technical discipline.


• Strong knowledge and practical engineering experience across several of the areas below, with solid technical foundations and the ability to learn across different security domains.


• Security engineering and architecture principles, vulnerability management, security testing and control validation.


• Cloud security, with a good understanding of Windows and/or Linux environments and enterprise networking.


• Identity and access management, privileged access and secrets management.


• Security platforms, including endpoint security, SIEM, SOAR and other security technologies.


• Automation and integration skills, including scripting or development using PowerShell, Python, Bash or similar, API-based integrations and Infrastructure as Code.


• CI/CD pipelines, version control and integrating security controls and testing into development workflows.


• Understanding of AI technologies, emerging security risks and appropriate guardrails.


• A practical and curious engineer who enjoys solving technical problems and building security solutions that help others work securely.


• Comfortable learning and applying your experience to unfamiliar technologies and problems.


• A pragmatic approach to security, able to identify the risks that matter and turn them into practical solutions.


• Clear communication and good technical judgement, with the confidence to challenge existing approaches.


• Strong team working, systems thinking, data literacy and an improvement mindset.

Core Responsibilities:

• Design, build, configure and maintain security platforms and protective controls across the technology environment.


• Develop security tooling, integrations and automation, turning repetitive or manual processes into scalable capabilities where appropriate.


• Support and improve identity security, privileged access and secrets management capabilities.


• Support the secure adoption of AI by understanding emerging risks and contributing to practical guardrails.


• Work closely with technology teams to embed security earlier in project and development lifecycles.


• Support and improve cloud security and the integration of security testing and controls into CI/CD and development workflows.


• Contribute to security architecture, technical design reviews and threat modelling, providing practical guidance on risk.


• Develop and maintain security integrations and data flows that support security operations and incident response, providing specialist engineering support during incidents where required.


• Test and continuously validate security controls, using the results to improve preventative and detective controls.


• Produce and maintain clear technical documentation for security platforms, integrations and solutions.

Continually develop your expertise across security engineering, cloud, identity, application security and other emerging technologies, sharing knowledge with the wider team.

Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.

To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.

At Core-Asset, we're committed to protecting and respecting your privacy.

Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.

We may change this policy from time to time, so please check this policy occasionally to ensure that you're happy with any changes.

By engaging with us (either by applying for a job we're advertising, registering through our website, or getting in touch with our business) you're agreeing to be bound by this policy.

Core-Asset Consulting is committed to protecting the privacy of our candidates, clients and website users.

For further information, please refer to our full Privacy Statement available on our website http://www.core-asset.co.uk/about-core-asset/privacy-statement

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.