Lead Security Engineer

As Lead Security Engineer (Consultant) at Kainos, you will steer security engineering and testing across platforms, defining testing methodology, engagement scope, and tool choices while coaching junior engineers. You’ll collaborate with agile teams to embed secure practices throughout the software development lifecycle. You will lead and mentor a small security team and provide technical guidance to customers and colleagues. You’ll stay ahead of threats and translate security concepts into actionable guidance, within a growth‑minded, people‑first culture.

• Lead security engineering and testing across Kainos Platforms and Services
• Define security testing methodology, engagement scoping, outputs, and tool/technology selections
• Develop and mentor junior security engineers
• Work with agile delivery teams to embed security practices in the SDLC
• Provide direction and leadership to the team and solve challenging problems together
• Educate customers and Kainos staff on good security practices
• Manage, coach, and develop a small team (performance and career development)

• Expertise securing Web Applications and Cloud Platforms (AWS/Azure)
• Experience testing software and infrastructure security using manual or automated tools; perform and document penetrations
• Assess software and infrastructure source code from a security perspective
• Knowledge of Continuous Security, CI/CD techniques
• Familiarity with international standards/regulations (NCSC, NIST, CIS, PCI, GDPR, OWASP ASVS, HIPAA, SOC2)
• Understanding of attack vectors and ability to articulate threats via threat modelling
• Excellent communication skills across audiences of varying technical ability
• Experience mentoring and coaching team members
• Programming or scripting experience across Windows/Linux/MacOS
• Staying current with new threats and attack types

• Strong communication
• Mentoring and coaching
• Leadership and people development
• Burp Suite
• OWASP-ZAP
• NMAP