Lead Software Engineer (Cyber Security Controls Automation)
Posted Updated
- We are seeking a Lead Software Engineer to join the Cyber Security Engineering team. This role will design, build and maintain data-driven capabilities that support the operation, monitoring and evidencing of security defences
- The role is focused on reducing manual effort across audit, assurance and risk processes by building tools, APIs, data pipelines, dashboards, command line utilities and automated evidence collection workflows
- You will work closely with security engineers, control owners, and risk teams to ensure controls are measurable, auditable and supported by reliable evidence
- Build software and automation to support control monitoring, testing, reporting and evidence collection
- Develop command line tools, APIs, integrations and workflows that simplify assurance activity
- Integrate with security platforms, group risk systems, cloud services, SIEM, vulnerability management, IAM, EDR and other engineering tools
- Develop repeatable evidence generation processes for audits, regulatory reviews, customer assessments and compliance activities
- Use data to identify control gaps, weaknesses, trends and risk exposure
- Translate technical control activity into clear, auditable evidence and reporting
- Work to improve control design, implementation, measurement and documentation
- Provide technical feedback utilising code and design review and engineering challenge
- Support the development of standards and policy documentation and policy-as-code approaches
- Promote automation and control monitoring and data-led assurance across the team
- Knowledge of common algorithms and data structures for handling large volumes of data, including data-intensive systems
- Exposure to a wide range of programming languages, frameworks and cloud technologies
- Previous experience building command line tools
- Commercial experience with Rust, TypeScript, Python, Go and JavaScript
- Working knowledge of web-based systems and REST APIs
- Experience providing feedback to engineering teams through code review
- Strong software engineering fundamentals, including testing, version control, maintainability, documentation and secure coding practices
- Experience working with structured and unstructured data to generate meaningful control insight
- Ability to communicate technical concepts clearly to engineers, risk teams, auditors and senior stakeholders
- Understanding of cyber security, control testing, evidence requirements and risk management
- Experience working in regulated environments
- Previous consulting experience working closely with engineering teams
- Experience writing standards, policy documentation or policy as code
- Relevant cyber security, cloud, software engineering or risk certifications
- Experience automating control testing, evidence collection or continuous control monitoring