Lead Security Engineer

Made Tech

. Set technical direction for secure systems across complex UK government and public sector client engagements .

Posted 10/14/2026full-timeBristol • United KingdomSenior💰 £75,000 - £100,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing secure cloud architectures using AWS, Azure, or GCP, while embedding security tooling and automation into CI/CD pipelines. Proven ability to engage with government security standards and mentor teams in security engineering practices.

Highest-signal resume keywords

Secure Cloud Architecture DesignVulnerability Remediation ProgrammesSecurity Tooling and AutomationTechnical Security ReviewsSC Security Clearance Eligibility

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud ArchitectureVulnerability RemediationSecurity ToolingCI/CD PipelinesProgramming or Scripting LanguageIAMNetwork SegmentationData Protection PatternsExposure ManagementPenetration Testing

Soft Skills

MentoringTechnical AdvisingCollaborationCommunication

Tools & Technologies

AWS InspectorGuardDutySecurity HubSASTSCAContainer Security ToolingEPSSKEVCVSS

Certifications & Qualifications

OSCPOSWEAWS Security SpecialtyCKS

Industry Keywords

GovAssureNCSC Cyber Assessment FrameworkCyber EssentialsHMG Security Policy FrameworkSTRIDEMITRE ATT&CK

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Set technical direction for secure systems across complex UK government and public sector client engagements
Act as the most senior security engineering voice on client engagements
Design secure-by-default reference architectures and establish identity, network, and data protection patterns
Maintain living technical security standards and reference architectures
Define vulnerability remediation prioritisation frameworks, remediation SLAs, and risk-acceptance registers
Drive vulnerability fixes into delivery backlogs and report programme KPIs to senior stakeholders
Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into delivery workflows
Build security tooling and automation that make secure engineering the default
Design systems and controls aligned with UK government security standards
Engage with government security communities and departmental technical teams
Report system posture, remediation performance, and architectural risk to senior client stakeholders
Build and drive adoption of detection, alerting, and incident-response tooling
Own the incident-response to vulnerability-management feedback loop
Coordinate cross-team security exercises and known-exploited-vulnerability drills
Mentor colleagues and client engineers and create structured development opportunities
Shape Cyber practice standards, contribute to hiring and technical calibration, share expertise externally, and grow the security engineering community

Requirements

What you’ll need

Deep hands-on experience designing and building secure cloud architectures at scale using AWS, Azure, or GCP
Experience with IAM, network segmentation, and data protection patterns
Proven experience embedding security tooling and automation into CI/CD pipelines and engineering workflows across multiple teams
Strong proficiency in at least one programming or scripting language, used to build production-grade security tooling
Eligibility for SC security clearance, requiring 5 years’ UK residency and 5 years’ employment history or history back to full-time education
OSCP, OSWE, or equivalent offensive security credential desirable
AWS, Azure, or GCP security specialty certification desirable
CKS desirable
Experience establishing and operating organisational-scale vulnerability remediation programmes
Experience using EPSS, KEV, CVSS, and asset criticality for risk-based prioritisation
Experience designing systems satisfying GovAssure, NCSC Cyber Assessment Framework, Cyber Essentials, and HMG Security Policy Framework
Experience conducting or coordinating technical security reviews and penetration testing in UK public sector contexts
Working knowledge of exposure management, including misconfiguration, identity exposure, and attack-path analysis
Experience with AWS Inspector, GuardDuty, Security Hub, or equivalents
Experience securing software supply chains, including SBOM generation, dependency provenance, and artifact signing
Experience building security engineering capability in consultancy, programme delivery, or multi-client environments
Experience acting as a trusted technical adviser to senior client stakeholders
Experience setting team ways of working in iterative delivery environments
Familiarity with STRIDE, MITRE ATT&CK, and attack trees
Experience integrating SAST, SCA, dependency scanning, and container security tooling into CI/CD pipelines
Equivalent capability through experience accepted for listed certifications

Benefits

Comp & perks

30 days paid annual leave
Flexible working hours
Flexible parental leave options
Part-time remote working for all staff
Paid counselling
Financial and legal advice
Smart Tech scheme
Cycle to work scheme
Individual benefits allowance
Health care cash plan option
Pension plan option
Optional social and wellbeing calendar of events
Employer-sponsored recognised cyber certifications for staff in scope