Senior Security Engineer

Role OVO-View

Salary banding: £53,000 - £76,000

Experience: Senior

Working pattern: Full-Time

Reporting to: Senior Security Engineer

Sponsorship: Unfortunately we are unable to offer sponsorship for this role.

This role in 3 words: Code, Cloud, Security

Top 3 qualities for this role: Problem Solving, Challenger, Curiosity

 

Where you’ll work:

Depending on the needs of your business area, we expect hub based people to be in the office at least once a week, and to go to OVO Connection events in-person. 

You’ll be assigned to the closest one of our three hub offices, Bristol, Glasgow, or London; unless your role requires field-based work. Each hub has accessible spaces to park your laptop, is designed to inspire people, help them connect and bring big ideas to life.

 

Everyone belongs at OVO

At OVO, we are on a mission to solve one of humanity's biggest challenges, the climate crisis. And we know it takes all of us to change the world. That's why we need diverse people from all abilities, gender identities, ethnicities, ages, sexual orientations, life experiences and backgrounds to join us.

 

Teamworking for the planet

Everything we do here spins around Plan Zero. So, naturally, the team you’ll be joining plays a gigantic role in making that happen. Here’s how:

We’re hiring creators and challengers who deliver high-impact, well-engineered solutions. Every role we’re hiring puts people at the heart of our security strategy and uses technology and operational processes to build a resilient and performant business. The Path to Zero is paved with secure technology!

 

This role in a nutshell:

The security engineering team collaborates with OVO’s Engineering teams to secure the design and configuration of OVO applications, infrastructure and to secure access to OVO’s resources. As a senior security engineer you will pioneer an innovative and inclusive security culture, inspire with compelling security solutions and land secure defaults and designs in data and cloud native engineering teams’ code, CI/CD and infrastructure. You will personally excel at implementing reliable tools to prevent, mitigate or automatically remediate misconfigurations and vulnerabilities. You will champion operational excellence across all OVO-built and accessed applications and infrastructure. 

 

Your key outcomes will be:

• Minimise Security Risk Exposure: Proactively identify, assess, and drive the mitigation of complex security risks within key products and systems through continuous attack, exposure and controls monitoring, expert assessment, threat modelling, and leading remediation efforts.
• Strengthen Secure Foundations: Champion and embed robust security architecture principles, secure development lifecycle (SDL) practices, and practical standards within development teams to build security in from the start.
• Enhance Security Operations & Team Capability: Optimise security tooling and processes within your domain for effectiveness and efficiency, while accelerating the development of junior engineers through active mentorship and guidance.

Systems: Familiarity with the following technologies and platforms would be advantageous (not a must have or exhaustive list):

• Cloud Native Application Protection and Cloud Security Posture Management (e.g. Wiz)
• GCP and AWS native security and compliance monitoring
• CI/CD product development pipelines and automation
• Identity and Access Management and Privileged Access Management platforms
• SaaS discovery, context-aware access and continuous access evaluation, SaaS and Cloud security event monitoring and security posture management
• Application Security Verification Standard and related technologies
• Web Application Firewall (e.g. Cloudflare, Cloud Armor)
• Data and AI security (eg DSPM, DLP, Model Armor)
• Security Information and Event Management (SIEM) and Security Orchestration and Automated Response (SOAR)
• Endpoint, Cloud and Identity Detection and Response
• Issue and Project Tracking (Jira)

 

You’ll be a successful Senior Security Engineer at OVO if you …

• Develop & Maintain Security Standards: Define, document, socialise, and maintain specific security standards, baselines, and procedures tailored to your assigned products or teams. Ensure these align with broader organisational policies while providing practical, actionable tools and guardrail