Senior Security Engineer managing the vulnerability management program and collaborating with engineering teams at Causaly. Focused on cloud security and secure coding practices.
Responsibilities
Own the vulnerability management program end-to-end: strategy, tooling, prioritisation, and remediation tracking across dependencies, containers, and cloud environments.
Define and maintain a dependency security strategy, including policies for third-party library adoption and update cadence.
Integrate and maintain security tooling in CI/CD pipelines (SAST, SCA, secrets detection, container scanning).
Act as a security consultant to product and engineering squads — supporting design reviews, architecture decisions, and secure coding practices.
Define and maintain security standards and guidelines practical for development teams.
Manage and continuously improve the Security Champions program — growing security awareness and capability across engineering teams.
Support SecOps in incident triage and response, contributing security engineering context where needed.
Requirements
Strong knowledge of cloud security — IAM, network security, secure configuration best practices.
Hands-on experience with security tooling in CI/CD pipelines (SAST, SCA, secrets scanning, container scanning).
Proven experience in a vulnerability management role, through the entire lifecycle.
Passionate and knowledgeable about using LLMs for building robust security practices, including triage, secure code review, threat analysis and tooling
In-depth knowledge of secure coding practices in Node.js, TypeScript, Python, and/or React.
Familiarity with security frameworks and standards (e.g. OWASP, NIST, CIS Benchmarks).
Strong communication skills, with the ability to translate risk for both technical and non-technical audiences.
Benefits
Competitive compensation package
Private medical insurance
Private dental insurance
Life insurance (4 x salary)
Personal development budget
Individual wellbeing budget
25 days holiday plus bank holidays
Your birthday off!
Potential to have real impact and accelerated career growth as a member of an international team that's building a transformative AI product.
Técnico de Segurança do Trabalho JR assisting with safety documentation and training for field activities at Arcadis. Focused on sustainable solutions in engineering and consulting.
Compliance Specialist managing documentation and policies for Orro's Information Security Management System. Supporting essential compliance activities across ISO 27001 and IRAP with strong attention to detail.
Infra Security Engineer focusing on endpoint security solutions in South Korea's urban mobility services. Collaborating on security architecture and threat detection initiatives.
Senior Cyber Security Consultant supporting client cybersecurity development initiatives. Job focuses on administrative and technical aspects of cybersecurity within a collaborative consulting team setting.
Assistant Vice President providing cybersecurity advisory across enterprise infrastructure at State Street. Supporting technology outcomes in secure and resilient ways across cloud, hybrid, and on - prem environments.
Vice President of Infrastructure Security overseeing enterprise - level cyber risk across platforms. Partnering with infrastructure and technology leaders to ensure secure, resilient, and compliant services.
Security & Resiliency Consultant at Kyndryl analyzing and resolving cybersecurity challenges for clients in a collaborative environment. Engaging in business development conversations and implementing security measures to protect systems.
Infrastructure Specialist managing IT projects, analyzing problems and providing solutions across various platforms. Collaborating closely with teams throughout project lifespans to ensure successful outcomes.
Cybersecurity Engineer ensuring safe operating environments for CACI users by protecting network boundaries and providing security services. Collaborating with stakeholders and conducting security assessments.
Cybersecurity Sales Specialist driving transformational security outcomes for Fortune 250 accounts. Influencing C - suite leaders and closing large multi - region deals.