Role

London (Hybrid) | 2 days in the office | Competitive Salary + Benefits

• Define, champion, and embed secure software development lifecycle (SSDLC) practices and secure coding standards across engineering teams through collaboration, training, and tooling.
• Perform threat modelling exercises for cloud‑native applications, microservices, and infrastructure components.
• Manage internal and external penetration testing engagements for Funding Circle applications, services, and cloud infrastructure.
• Collaborate closely with Cloud Platform Engineers, DevX and Product Engineering to ensure security requirements are integrated into system designs and technology choices from the outset.
• Act as a subject‑matter expert on DevSecOps, application security, and cloud security (AWS), providing guidance and mentorship to other engineers.
• Contribute to drive implementation of security automation across cloud infrastructure...