software engineer

ai engineer

senior software engineer

full stack engineer

lead software engineer

application security engineer

Cognism

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
THE ROLE

The Senior Application Security Engineer is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.

KEY RESPONSIBILITIES

Security by Design &amp; Product Integration
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
Application Risk Assessment &amp; AI Security
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
Secure SDLC &amp; DevSecOps Enablement
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
Threat Modelling &amp; Architecture Support
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
Application Security Testing &amp; Engineering
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
Collaboration, Education &amp; Influence
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
CORE COMPETENCIES
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li>Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li>Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li>Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li>Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
EDUCATION &amp; EXPERIENCE
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Senior Application Security Engineer

Data Idols

<div><h2 class="jobSectionHeader">Staff Security Engineer</h2>

Salary: Up to &pound;150,000 + Benefits

Location: London (Hybrid &ndash; 3 days per week in the office)

We are currently looking for a Staff Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Staff Security Engineer will play a pivotal role in shaping the organisation&rsquo;s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.

This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.
<h2 class="jobSectionHeader">
The Opportunity</h2>

As the Staff Security Engineer, you&rsquo;ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure-by-design culture across the business.

Key responsibilities include:
<ul>
<li>Driving application and product security initiatives across multiple engineering teams</li>
<li>Conducting security reviews, threat modelling and risk assessments</li>
<li>Implementing and improving vulnerability management processes</li>
<li>Embedding security tooling into CI/CD pipelines and development workflows</li>
<li>Partnering with developers to promote secure coding practices</li>
<li>Reviewing cloud infrastructure and architecture from a security perspective</li>
<li>Supporting incident response and remediation activities when required</li>
<li>Defining and promoting security standards, policies and best practices</li>
<li>Influencing technical decision-making across engineering and leadership teams</li>
</ul>
This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.
<h2 class="jobSectionHeader">
What&rsquo;s in it for you?</h2>
<ul><li>Salary up to &pound;150,000</li>
<li>Hybrid working model</li>
<li>Opportunity to work on cutting-edge AI and technology products</li>
<li>High level of autonomy and influence</li>
<li>Collaborative engineering culture</li>
<li>Career progression opportunities as the business continues to scale</li>
<li>Ongoing learning and professional development</li>
<li>Pension scheme</li>
<li>Generous holiday allowance</li>
</ul><h2 class="jobSectionHeader">Skills and Experience</h2>
<ul><li>Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer</li>
<li>Strong understanding of application security principles and secure software development practices</li>
<li>Experience working closely with software engineering teams</li>
<li>Hands-on experience securing cloud environments (AWS, GCP or Azure)</li>
<li>Experience with vulnerability management, threat modelling and security reviews</li>
<li>Knowledge of CI/CD security and modern development practices</li>
<li>Excellent stakeholder management and communication skills</li>
</ul><h3 class="jobSectionHeader">Eligibility</h3>

Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.

If you would like to be considered for the role and feel you would be an ideal fit, please submit your CV by clicking the Apply button below.</div><div></div>

Staff Security Engineer

<div><h2 class="jobSectionHeader">Lead Software Security Engineer</h2>

Salary: Up to &pound;150,000 + Benefits

Location: London (Hybrid &ndash; 3 days per week in the office)

We are currently looking for a Lead Software Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Lead Security Engineer will play a pivotal role in shaping the organisation&rsquo;s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.

This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.
<h2 class="jobSectionHeader">
The Opportunity</h2>

As the Lead Security Engineer, you&rsquo;ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure-by-design culture across the business.

Key responsibilities include:
<ul>
<li>Driving application and product security initiatives across multiple engineering teams</li>
<li>Conducting security reviews, threat modelling and risk assessments</li>
<li>Implementing and improving vulnerability management processes</li>
<li>Embedding security tooling into CI/CD pipelines and development workflows</li>
<li>Partnering with developers to promote secure coding practices</li>
<li>Reviewing cloud infrastructure and architecture from a security perspective</li>
<li>Supporting incident response and remediation activities when required</li>
<li>Defining and promoting security standards, policies and best practices</li>
<li>Influencing technical decision-making across engineering and leadership teams</li>
</ul>
This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.
<h2 class="jobSectionHeader">
What&rsquo;s in it for you?</h2>
<ul><li>Salary up to &pound;150,000</li>
<li>Hybrid working model</li>
<li>Opportunity to work on cutting-edge AI and technology products</li>
<li>High level of autonomy and influence</li>
<li>Collaborative engineering culture</li>
<li>Career progression opportunities as the business continues to scale</li>
<li>Ongoing learning and professional development</li>
<li>Pension scheme</li>
<li>Generous holiday allowance</li>
</ul><h2 class="jobSectionHeader">Skills and Experience</h2>
<ul><li>Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer</li>
<li>Strong understanding of application security principles and secure software development practices</li>
<li>Experience working closely with software engineering teams</li>
<li>Hands-on experience securing cloud environments (AWS, GCP or Azure)</li>
<li>Experience with vulnerability management, threat modelling and security reviews</li>
<li>Knowledge of CI/CD security and modern development practices</li>
<li>Excellent stakeholder management and communication skills</li>
</ul><h3 class="jobSectionHeader">Eligibility</h3>

Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.

If you would like to be considered for the role and feel you would be an ideal fit, please submit your CV by clicking the Apply button below.</div><div></div>

Lead Software Security Engineer

Harmonic Security

<div>AI is being run everywhere, by humans and agents. Harmonic Security governs all of it. The AI Governance and Control (AIGC) platform understands user / agent intent and data context in real time, giving security teams visibility and control across every tool and workflow so companies can move faster with AI while minimizing risk.
We operate in one of the fastest-moving spaces in tech: the emerging intersection of AI and cybersecurity. It's a market still being defined, and we're among the first to build natively for it - protecting sensitive data in real time, at the endpoint, with minimal friction for the teams using it. Enterprises get full visibility and control. Their people get to innovate without guardrails slowing them down.
Named to the Rising in Cyber 2026 list, Harmonic is gaining serious recognition and serious traction. We're led by deep cybersecurity expertise and backed by investors who know the space: N47, Ten Eleven Ventures, and In-Q-Tel.
As AI adoption inside the enterprise accelerates, the ability to safely observe, control, and enforce policy in real time isn't a nice-to-have. It's mission-critical infrastructure. That's what we build.<h2 class="jobSectionHeader">
How We Work: AI-First by Design</h2>
Harmonic exists to help enterprises adopt AI safely and at scale. We hold ourselves to the same standard. Everyone at Harmonic actively uses AI tools to do their best work, from research and writing to building processes and automating workflows. We expect every new hire to bring curiosity about AI and a willingness to use it to work smarter, faster, and more creatively. For some roles, that means tinkering and staying open to new tools. For others, it means building entirely new systems with AI at the core. We'll be clear about what we expect for each role, and we'll give you the tools and support to get there.<h2 class="jobSectionHeader">
About the Team</h2>
The Security &amp; TechOps team builds the systems, tooling, and research that keep Harmonic secure, trusted, and able to move fast. We work across the entire lifecycle of how the company operates-from how we build software, to how we detect threats, to how we prove our security posture to customers, to how employees use the technology that powers their work.
We focus on enabling speed without sacrificing safety. That means creating secure-by-default engineering practices, building automation and detections that reduce manual work, researching emerging AI security risks, running assurance programmes like SOC 2 and ISO 27001, and shaping the internal platforms that help teams work efficiently and securely.
We&rsquo;re a hands-on, engineering-first group. We avoid box-ticking and heavy process in favour of practical solutions, strong automation, and constant improvement. We collaborate closely across functions, operate with high ownership, and support each other through rapid growth. Our shared goal is to build the trust, systems, and capabilities that let Harmonic innovate confidently and at scale.<h2 class="jobSectionHeader">
About the Role</h2>
Our goal is simple: enable engineering teams to move fast and ship securely. We do this by creating the tools, standards, and systems that make secure development seamless. Whether it&rsquo;s hardening pipelines, tuning detection tooling, or staying ahead of emerging AI risks, we build the connective tissue that keeps Harmonic&rsquo;s products secure and trusted.
This team operates at the heart of our engineering culture - hands-on, collaborative, and pragmatic. We bridge the gap between security and development, helping both move faster and with more confidence.
We&rsquo;re looking for a Staff Security Engineer, Product to shape how Harmonic builds secure products from the start. You&rsquo;ll lead the creation of tools, standards, and practices that make secure development part of our everyday engineering workflow.
You&rsquo;ll work closely with Engineering and DevOps to integrate security into design, build, and deployment. From managing code scanning and vulnerability tooling to supporting product pen tests and monitoring AI-related risks, you&rsquo;ll help teams ship fast and safely while building lasting confidence in our products.<h2 class="jobSectionHeader">
What You&rsquo;ll Do</h2><ul><li>
Act as the security partner to engineering - helping teams design, build, and ship securely without slowing down development.</li><li>
Drive and maintain the tooling that underpins product security - from code scanning and vulnerability detection to CI/CD hardening and reporting.</li><li>
Keep a close eye on our own AI systems and tools - monitoring emerging threats and ensuring our AI security posture evolves with the field.</li><li>
Lead threat modelling across the product - running structured STRIDE and LINDDUN assessments on new features and system designs, building repeatable templates, and using AI tooling to make it faster and more scalable. The goal is making threat modelling a normal part of how we build, not a separate event.</li><li>
Use AI to build and scale the product security function - integrating tools like Claude Code into security workflows, from automated threat modelling to building internal security tooling. A high-performing programme, not necessarily a large one.</li></ul><h2 class="jobSectionHeader">
What You Bring</h2><ul><li>
Demonstrable software engineering experience in programming, application design and SLDC.</li><li>
Proven experience as a Product or Application Security Engineer in a modern engineering environment - you understand how products are built and shipped.</li><li>
Curiosity for emerging threats, especially around AI and ML systems, and a drive to keep our defences one step ahead.</li><li>
Excellent communicator who can translate between engineering, security, and go-to-market teams - clear, direct, and grounded in technical reality.</li><li>
Hands-on experience with structured threat modelling, including both security and privacy threat modelling methodologies (e.g. STRIDE, LINDDUN).</li><li>
Strong Claude Code or equivalent AI coding agent experience. Demonstrated use of agentic AI to build, automate, and accelerate security engineering work. This is a must-have.</li></ul><h2 class="jobSectionHeader">
You Might Be a Fit If You</h2><ul><li>
Like working closely with engineering teams to embed security into everyday development without slowing them down.</li><li>
Enjoy building and tuning security tools, pipelines, and dashboards that give developers useful signal - not noise.</li><li>
Can translate complex security risks into clear, actionable guidance for engineers and product teams.</li><li>
Want to shape how secure development happens in a high-growth, modern engineering organisation.</li><li>
Reach for Claude Code as a first instinct when building or automating something, and want to apply that to building a product security function that punches well above its weight</li></ul><h2 class="jobSectionHeader">
Why Join Us</h2>
This isn&rsquo;t just a job; it&rsquo;s an opportunity to be part of a team that is redefining cybersecurity. We believe today&rsquo;s talent is tomorrow&rsquo;s success, and we&rsquo;re committed to creating an environment where you can do the best work of your life.<ul><li>
Competitive pay and meaningful equity with a direct stake in Harmonic&rsquo;s success</li><li>
Comprehensive benefits, pension plan, generous PTO, and flexible hybrid work</li><li>
A small, passionate team that values transparency, creativity, and learning</li><li>
Thoughtful leadership that cares deeply about growth, impact, and people</li><li>
Annual global off-sites (past trips include Lisbon and Nashville)</li><li>
The chance to directly shape both our product and our culture as we build a category-defining company</li></ul><h2 class="jobSectionHeader">
Harmonic's Core Values</h2><div>
</div><h3 class="jobSectionHeader">
Flourish in the Unknown</h3>
We embrace new, unfamiliar situations that require initiative and rapid decision-making. We orient ourselves quickly and deliver results with minimal guidance.<div> 
</div><h3 class="jobSectionHeader">
Never Full</h3>
We raise our hands, take on challenges, and assist others whenever possible. We hunger for opportunities to learn and do more.<div> 
</div><h3 class="jobSectionHeader">
Perfect Harmony</h3>
We support one another to create cohesion and unity. We collaborate openly, share feedback honestly, and help everyone produce their best work.
Compensation Range: &pound;125K - &pound;135K</div>

Staff Security Engineer, Product

Blockchain

<div><div>Blockchain is connecting the world to the future of finance. As the most trusted and fastest-growing global crypto company, it helps millions of people worldwide safely access cryptocurrency. Since its inception in 2011, Blockchain has earned the trust of over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions.</div>
You will operate the Product Security programe for Blockchain.com's internally-developed products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you'll design and run the secure development lifecycle, lead threat modeling and architecture review, own the security debt lifecycle for product engineering teams, and architect the automated pipelines that protect billions in transaction volume. You will embed with product and engineering teams, convert technical findings into business-prioritized remediation, and lift developer capabilities so security is delivered by code and process.

WHAT YOU WILL DO
<ul>
<li>Strategic Security Partnership: Act as a senior security engineer for the different product lines like Consumer, OTC. You will own the security gates for major feature releases and ensure security is integrated from the design phase.</li>
<li>Secure SDLC Operator: Operate and improve the secure development lifecycle. This includes orchestrating SAST/SCA/DAST, streamlining SARIF ingestion, PR review standards, CI/CD security automation, and vulnerability triage workflows.</li>
<li>AI-Driven SDLC Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure development lifecycle.</li>
<li>Threat Modelling &amp; Architecture Reviews: Lead STRIDE/attack-tree threat models for sensitive flows including authentication, payment, custody, reconciliation and sign off on security architecture for critical designs.</li>
<li>Product Security Governance &amp; Standards: Translate technical risks and regulatory demands into clear security policies. You will own the creation and upkeep of our Application Security Standards, reference architectures, and compliance-driven secure coding baselines.</li>
<li>Bug Bounty Leadership: Oversee the technical triage and remediation strategy for our Bug Bounty program. You will turn external researcher findings into internal architectural hardening projects.</li>
<li>Release Reviews: Perform deep-dive manual code reviews of security-sensitive Pull Requests, mentor engineers on secure coding patterns, and provide pragmatic remediation guidance.</li>
<li>Advanced Code Auditing: Conduct deep-dive manual and automated code reviews on highly sensitive Java and Kotlin backend Pull Requests.</li>
<li>Security Debt &amp; Remediation Negotiation: Produce data-driven Security Debt packs and negotiate remediation into engineering roadmaps. You will negotiate remediation timelines with Product Owners and Engineering leadership, backed by risk-based data.</li>
<li>Detection &amp; Telemetry Integration: Define application runtime signals (business-logic anomalies, auth anomalies, reconciliation mismatches) and work with SecOps to instrument logs and alerts.</li>
<li>Testing &amp; Automation: Build and maintain product-level test harnesses, fuzzing/property tests and CI checks to prevent regressions for business-critical flows.</li>
<li>Incident Response Support: Provide product-level Incident Response expertise like test forensic runbooks, support reproduction of payment/settlement incidents, and advise on containment/remediation whenever needed.</li>
<li>Metrics &amp; Risk Visibility: Define and own the Product Security metrics (e.g., MTTR for critical vulnerabilities, security debt burn-down, and defect density). You will translate these KPIs into high-level risk reports for the Head of Security and Engineering leadership to drive data-backed resourcing decisions.</li>
<li>People &amp; Process: Coach junior product security engineers and security champions. You will assist the Product Security Lead to define hiring standards and capability plans.</li>
</ul>
WHAT YOU WILL NEED

Must-Haves
<ul>
<li>4+ years total security engineering experience with at least 3+ years focused specially in application/product security or equivalent.</li>
<li>Experience with Web, Mobile, Cloud, Infrastructure Pentests and Red Teaming (e.g., phishing)</li>
<li>Proven track record of shipping security automation using CodeQL/GHAS, Snyk, or similar. You should be intimately familiar with the SARIF ecosystem and ASPM workflows.</li>
<li>Expert-level ability to audit and propose fixes in Kotlin/Java, TypeScript/JS, Python, and familiarity with containerised deployments (Kubernetes).</li>
<li>Strong threat modeling experience and pragmatic architecture guidance for high-stakes financial flows (AuthN/AuthZ, Cryptography, Payments).</li>
<li>Experience building CI checks, test harnesses and lightweight fuzzing/property tests.</li>
<li>Excellent stakeholder skills &mdash; able to negotiate remediation with Engineering Directors and Product owners, balancing security requirements with business velocity.</li>
</ul>
Nice-to-haves
<ul>
<li>Prior fintech/Trading/OTC product security experience or familiarity with custody/signing patterns.</li>
<li>Practical experience designing or deploying AI-assisted security tooling, leveraging LLMs for automated software patch generation, or evaluating vulnerability detection agents within enterprise developer pipelines.</li>
<li>Prior experience operating alongside GRC frameworks, authoring developer-facing security policies from scratch, and building automated policy-as-code gateway integrations.</li>
<li>Public track record of CVEs, security research, or open-source contributions to security tooling.</li>
<li>Advanced credentials such as OSCP, OSWE, CISSP or equivalent.</li>
<li>Experience with on-chain/off-chain integration, payment reconciliation, or smart contract security.</li>
<li>Familiarity with vulnerability management platforms (DefectDojo, Dependabot orchestration) and GRC/Gateway integrations.</li>
<li>Prior contributions to security automation and developer tooling (open source or internal).</li>
</ul>
COMPENSATION &amp; PERKS
<ul>
<li>Full-time salary based on experience and meaningful equity in an industry-leading company</li>
<li>This is a role based in our London office, with a mandatory in-office presence four days per week.</li>
<li>Work from Anywhere Policy: You can work remotely from anywhere in the world for up to 20 days per year.</li>
<li>ClassPass</li>
<li>Unlimited vacation policy; work hard and take time when you need it</li>
<li>Apple equipment</li>
<li>The opportunity to be a key player and build your career at a rapidly expanding, global technology company in an emerging field</li>
<li>Flexible work culture</li>
</ul><div>
Blockchain is committed to diversity and inclusion in the workplace and is proud to be an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, religion, color, national origin, gender, gender expression, sex, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, and apprenticeship. Blockchain makes hiring decisions based solely on qualifications, merit, and business needs at the time.

You may contact our Data Protection Officer by email at dpo@blockchain.com. Your personal data will be processed for the purposes of managing Controller's recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.

Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller's behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses.

Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.</div></div>

Senior Product Security Engineer

HCLTech

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.HCLTech is a globally recognized leader in the Tech and IT industry, but we&rsquo;ve never forgotten the startup mindset that got us here. We&rsquo;ve always approached our work with an idea-first attitude because every one of our accomplishments &mdash;no matter how big or small &mdash;can be traced back to an idea&rsquo;s single spark.It&rsquo;s that spark &mdash;that inner drive &mdash;that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that&rsquo;s what drives you to be better, be more and ultimately, be more fulfilled.ROLE SUMMARYThe Senior Endpoint Engineer is responsible for engineering, enhancing, and supporting the organization&rsquo;s Azure Virtual Desktop (AVD) and Microsoft Intune environments for both physical devices and virtual workspaces. The role requires strong technical expertise, disciplined operational processes, and deep knowledge of endpoint technologies to ensure stable, secure, and efficient end‑user computing services across the enterprise. This position directly impacts nearly all users and plays a critical role in maintaining a reliable and secure endpoint ecosystem.ROLE RESPONSIBILITIES<ul><li>Drive to deliver technology and products in the roadmap on schedule and with the highest quality.</li><li>Provide advice, guidance, and direction to carry out plans and procedures, ensuring schedule attainment, product development process adherence and performance.</li><li>Provide last tier support for operations and support teams, including root cause analysis and preventative analysis.</li><li>Provide technical support with expert knowledge and act as an escalation point for the Desktop Operations team and anything related to the End User Computing environment, focusing on our Endpoint Security Protection, and application management.</li><li>Partner with other Engineering teams to develop solutions.</li><li>Manage the Azure Virtual Desktop (AVD) environment including creating images, deploy VMs, monitor VM performance.</li><li>Develop automated solutions for deploying software packages, application patches/updates and workstation images.</li><li>Engineer and support multiple Windows desktop images.</li><li>Manage the entire lifecycle of our global standard desktop and laptop models.</li><li>Design and implement Microsoft Intune solutions that meet end user requirements.</li><li>Create and manage Intune policies for application deployment, device compliance, and security configurations.</li><li>Ensure seamless integration with other Microsoft 365 services.</li><li>Windows 11 Provisioning: Design and deploy Windows 11 provisioning processes using Intune Autopilot. Configure and manage Windows Update for Business policies. Develop and maintain standardized 11 deployment images.</li><li>Active Directory Group Policy Management: Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies. Collaborate with the Active Directory team to ensure alignment with broader infrastructure goals.</li><li>Security and Compliance: Implement security best practices and compliance policies within Intune. Monitor and respond to security incidents related to mobile devices and endpoints.</li><li>Documentation and Training: Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings.</li><li>Maintain desktop images and modify SCCM task sequences as needed.</li><li>Package, test, and deploy new applications as needed.</li><li>Maintain and expand existing Knowledge Base.</li><li>Create new and maintain existing support documents to maintain high standards of quality in the delivery of End User Computing services.</li></ul>TECHNICAL QUALIFICATIONS<ul><li>8+ years total work experience, 5+ of those years with proven experience in designing and implementing Microsoft Intune solutions.</li><li>5 years&rsquo; experience as a system engineer.</li><li>Desktop engineering and support experience in an enterprise environment.</li><li>Proven experience with Windows 11, Active Directory Structure, and Managing Group Policies.</li><li>Experience developing and testing software packages using Install shield, or equivalent.</li><li>Skills managing a VDI environment (Azure Virtual Desktop preferred).</li><li>Expert level experience within End Point Protection Engineering.</li><li>Expertise in MECM and Intune.</li><li>Expert in patch management including bios and firmware updates, service pack upgrades, and application-based updates.</li><li>Basic Database Administration experience, particularly in SQL Server.</li></ul>GENERAL QUALIFICATIONS<ul><li>Proficient communication skills, both written and verbal.</li><li>Possess sound organization and problem-solving skills.</li><li>Excellent ability to work in a team environment.</li><li>Motivated to learn and grow professionally.</li></ul>EDUCATION REQUIREMENTS<ul><li>Bachelor&rsquo;s degree from an accredited college or university.</li></ul>Benefits:<ul><li>A supportive, diverse and global team with a brilliant culture.</li><li>Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.</li><li>Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks &ndash; Engagement Champion to name a few.</li><li>To know more about us visit &ndash; www.hcltech.com</li><li>For more information on how we process your personal data, please refer to HCLTech&rsquo;s Candidate Data Privacy Notice.</li></ul>Pay: &pound;24,420.00-&pound;50,000.00 per yearWork Location: In person

Track Lead - MDM Intune

Kryptos Technologies Limited

<div><h2 class="jobSectionHeader">Tasks</h2>

AWS QA Engineer (App Modernization &amp; AI-driven Testing)

Duration: 4 -6 months

Location: London -Hybrid (3 Days onsite)

Role Overview

We are seeking a skilled AWS QA Engineer with strong experience in testing serverless and event-driven architectures. The role focuses on validating modern cloud-native applications built on AWS, ensuring high quality across application modernization programs, while leveraging AI-assisted testing using AWS Kiro.

Key Responsibilities

Functional &amp; Automation Testing (AWS Serverless)
<ul>
<li>Design, develop, and execute test strategies and test cases for applications built on:
</li>
<li>AWS Lambda, API Gateway
</li>
<li>Amazon EventBridge
</li>
<li>Amazon Kinesis Data Streams
</li>
<li>Validate event-driven and streaming workflows, including message processing and data consistency.
</li>
<li>Develop automated test scripts to validate:
</li>
<li>API responses
</li>
<li>Event flows and triggers
</li>
<li>Data persistence in DynamoDB / S3
</li>
</ul>Event-driven &amp; Streaming Validation
<ul>
<li>Create and execute test scenarios for:
</li>
<li>Kinesis stream data ingestion and processing
</li>
<li>Event orchestration via EventBridge
</li>
<li>Validate end-to-end workflows across microservices and serverless components.
</li>
<li>Perform integration testing and contract testing across services.
</li>
</ul>Application Modernization Testing
<ul>
<li>Support testing for modernized applications (legacy cloud-native).
</li>
<li>Perform:
</li>
<li>Functional testing
</li>
<li>Regression testing (pre/post migration comparison)
</li>
<li>System Integration Testing (SIT)
</li>
<li>Validate API-driven and microservices-based architectures [AWS Server...sting v1.0 | PowerPoint]
</li>
</ul>AI-driven Testing (Kiro)
<ul>
<li>Leverage AWS Kiro for AI-assisted testing to improve productivity.
</li>
<li>Use AI for:
</li>
<li>Test case generation
</li>
<li>Test data preparation
</li>
<li>Automated validation and defect detection
</li>
<li>Contribute to AI-enabled quality engineering practices.
</li>
</ul>Performance, Reliability &amp; Security Testing
<ul>
<li>Execute:
</li>
<li>Performance and load testing for serverless workloads
</li>
<li>Resilience and failure scenario testing (event loss, retries, scaling)
</li>
<li>Validate:
</li>
<li>Security and access controls (IAM roles, authentication flows)
</li>
<li>Data integrity and system reliability
</li>
</ul>Automation &amp; DevOps Integration
<ul>
<li>Build and maintain automated testing frameworks for AWS workloads.
</li>
<li>Integrate testing into CI/CD pipelines.
</li>
<li>Enable automated validation for:
</li>
<li>Serverless APIs
</li>
<li>Event-driven systems
</li>
<li>Ensure continuous testing and fast feedback cycles.
</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>

Required Skills &amp; Experience

Core Testing &amp; AWS Skills
<ul>
<li>Strong experience in QA / Automation testing for cloud applications
</li>
<li>Hands-on experience with:
</li>
<li>AWS Lambda
</li>
<li>Amazon EventBridge
</li>
<li>Amazon Kinesis Data Streams
</li>
<li>API Gateway
</li>
<li>DynamoDB and S3
</li>
<li>Experience testing event-driven and serverless architectures
</li>
<li>Test Automation &amp; Tools
</li>
<li>Experience with:
</li>
<li>Automation frameworks (Jest framework, Java/Springboot, or similar)
</li>
<li>API testing tools (Postman, REST clients)
</li>
<li>Ability to:
</li>
<li>Create automated test suites
</li>
<li>Validate JSON-based inputs/outputs for APIs and events
</li>
<li>Knowledge of:
</li>
<li>BDD frameworks (Cucumber - good to have)
</li>
</ul>Application Modernization Testing
<ul>
<li>Experience in testing:</li>
<li>Microservices architectures</li>
<li>API-first systems</li>
<li>Strong understanding of:</li>
<li>Integration flows</li>
<li>Data validation across distributed systems</li>
</ul>
AI &amp; Innovation
<ul>
<li>Exposure to:</li>
<li>AI-assisted testing (AWS Kiro preferred)</li>
<li>Test automation using GenAI tools</li>
<li>Interest in driving AI-enabled QA practices</li>
</ul>
DevOps &amp; Engineering Practices
<ul>
<li>Experience integrating tests within:</li>
<li>CI/CD pipelines (GitHub Actions, Jenkins)</li>
<li>Familiarity with:</li>
<li>Infrastructure as Code validation (CDK)</li>
<li>Monitoring tools (CloudWatch)</li>
</ul>
Preferred Qualifications
<ul>
<li>AWS Certified (Developer or Cloud Practitioner)</li>
<li>Experience with:</li>
<li>Streaming platforms (Kafka/MSK)</li>
<li>Performance and security testing tools</li>
<li>Exposure to enterprise-scale AWS modernization programs</li></ul></div>

AWS QA Engineer ( App Modernization & AI driven Testing)

Explore 641+ Application security engineer in London this July. Find roles across top companies and apply now to boost your career.