Cybersecurity (Secure Software/Cloud Integration) Engineer

London
2 weeks ago
Create job alert

Overview

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness unrelenting technological change to deliver innovations that provide a competitive advantage and improve everyday life worldwide.

As part of the Expleo Digital and Emerging Technology (DET) team, you will report to the Head of Cybersecurity and play a key role within our forward-leaning Cybersecurity Practice. In this role, you will support the design and implementation of secure software development processes and cloud-native integration patterns for clients across multiple sectors.
This is a hands-on, delivery-focused role where you will embed DevSecOps principles into engineering pipelines, guide secure software development lifecycle (SSDLC) practices, and advise on adopting security tooling across cloud and hybrid environments. You will work closely with development, DevOps, and platform teams to uplift security maturity, enabling secure and scalable software delivery aligned with industry standards and compliance requirements.

Responsibilities

Embed security practices into software development pipelines by integrating DevSecOps principles, automation tools, and governance controls.
Support the definition, implementation, and continuous improvement of secure software development lifecycle (SSDLC) processes across internal and client delivery teams.
Advise on secure architecture patterns and controls for cloud-native, containerised, and hybrid applications, aligned with industry standards and best practices.
Collaborate with engineering, DevOps, and platform teams to guide the adoption of security tooling across CI/CD environments.
Conduct reviews of application architecture, infrastructure-as-code, and security configurations to identify risks and support remediation planning.
Provide input into security design decisions, threat modelling sessions, and architectural governance forums.
To support engineering teams and deliver clear, practical documentation, including secure development standards, integration guidelines, and process artefacts.
Stay informed on the evolving threat landscape, cloud security trends, and software security vulnerabilities to ensure contemporary and effective delivery.

Qualifications

A degree (or equivalent experience) in Cybersecurity, Computer Science, Software Engineering, or a related technical discipline.
Recognised industry certifications in cybersecurity or application security (CompTIA, ISC2, GIAC, ISACA, or CREST).
Highly desirable are certifications related to secure development and cloud security (CSSLP, AZ-500, SC-100/SC-200, AWS Security, GCSA, GCLD, or similar).
Familiarity with secure coding standards (OWASP, SEI CERT) and SSDLC models (Microsoft SDL, NIST (Apply online only) SSDF).
Knowledge or experience of Product Assurance Schemes (PAS) or product security frameworks (PAS 754, PAS 1296, or similar) is desirable.
DevOps, DevSecOps, or platform certifications (Kubernetes, Terraform, Azure DevOps, GitHub Actions) are advantageous.

Essential skills

Strong understanding of secure software development principles and the software development lifecycle (SDLC/SSDLC).
Proficiency in modern DevOps environments.
Practical experience with cloud security concepts and controls across at least one major cloud platform (AWS, Azure, or GCP).
Solid grasp of secure coding practices and common software vulnerabilities.
Ability to assess code, configurations, and architecture for security issues and provide practical remediation guidance.

Desired skills

Familiarity with infrastructure-as-code (IaC) security practices and tooling.
Knowledge of container orchestration platforms and associated security tooling.
Awareness of compliance and assurance frameworks relevant to secure software.
Understanding cloud-native security services and architectures, including Zero Trust models and shift-left security practices.
Exposure to secure software supply chain practices, including code provenance, dependency management, and SBOM generation.

Experience

Experience in cybersecurity, secure software engineering, or cloud security roles, with a strong emphasis on delivery.
Demonstrable experience embedding security controls and tooling into software development pipelines and DevOps environments.
Hands-on experience implementing or supporting secure development processes (SSDLC), code review practices, or CI/CD security integration.
Proven involvement in cloud-native or hybrid solution development with exposure to major cloud platforms.
Experience collaborating with developers, DevOps, architects, and platform teams to design and implement secure software solutions.
Exposure to application security tooling (SAST, DAST, SCA), cloud security services, and infrastructure-as-code security practices.
Familiarity with agile or DevOps-based delivery models and working across multiple stakeholders or client environments.

What do I need before I apply

You must have the right to work in the UK

Related Jobs

View all jobs

Cybersecurity Solutions Engineer

Deputy CISO

Cyber Security Consultant

Senior Cyber Security Engineer

Sales executive

Network Security Engineer

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Jobs

Cloud Jobs at Newly Funded UK Start-ups: Q3 2025 Investment Tracker

Cloud computing continues to be a pivotal force in the UK tech scene. From serverless architectures and edge computing solutions to AI-driven data analytics platforms, start-ups across the country are leveraging cloud technologies to innovate at lightning speed. This trend is far from a passing phase; in fact, cloud adoption has become a strategic imperative for businesses of all sizes, enhancing their scalability, flexibility, and competitive edge in a global marketplace. In Q3 2025, UK-based cloud computing start-ups attracted impressive funding rounds, signalling robust investor confidence in the sector. Whether you’re a cloud engineer, DevOps practitioner, project manager, or aspiring to break into cloud-based roles, these newly funded ventures are on the lookout for talent. This Q3 2025 Investment Tracker will guide you through the most notable funding news, the job opportunities that these investments have created, and how you can position yourself to land a coveted role at these cutting-edge companies. Lastly, we’ll introduce you to Cloudcomputingjobs.co.uk—a dedicated platform that connects cloud professionals with emerging start-ups and established enterprises alike. If you’re eager to harness the momentum of this booming sector, read on to discover the latest hiring trends, in-demand skill sets, and practical steps to accelerate your cloud career.

Jobs

Portfolio Projects That Get You Hired for Cloud Jobs (With Real GitHub Examples)

As cloud computing becomes the de facto choice for businesses of all sizes, cloud professionals are in high demand. From infrastructure automation to container orchestration and serverless architecture, cloud roles require a blend of technical expertise and practical, hands-on skills. Whether you’re aiming to be a Cloud Engineer, Solutions Architect, DevOps Professional, or any role involving AWS, Azure, or Google Cloud Platform (GCP), a well-curated portfolio of projects is often the deciding factor for hiring managers. In this comprehensive guide, we’ll explore: Why a portfolio matters more than ever in the cloud computing job market. Which types of projects align with different cloud roles. Real GitHub examples that exemplify best practices in cloud development and deployment. Actionable project ideas to help you stand out from the crowd. Best practices for structuring and presenting your repositories for maximum impact. By the end, you’ll have a clear blueprint to build an impressive portfolio that resonates with potential employers. And when you’re ready to make your move, don’t forget to upload your CV on Cloud-Jobs.co.uk so that top companies seeking cloud talent can see your experience firsthand.

Jobs Careers

Cloud Computing Job Interview Warm‑Up: 30 Real Coding & System‑Design Questions

The world of cloud computing has rapidly evolved into a critical backbone for modern businesses. From running microservices on containerised infrastructure and automating continuous deployments, to architecting highly available, secure solutions at global scale—the cloud domain offers endless career opportunities. Whether you aim to become an AWS Solutions Architect, an Azure DevOps Engineer, or a GCP Cloud Developer, your expertise in designing, coding, and managing cloud‑native services can open doors across every industry. However, cloud job interviews can be challenging. Employers typically probe a wide array of topics, from traditional software engineering and system design to security, scalability, and cost optimisation in cloud environments. For many candidates, this means a broad but in-depth skillset, along with hands‑on demonstrations of your knowledge. In this guide, we’ll walk you through 30 real coding & system-design questions you might face when interviewing for cloud roles. Each question or scenario is designed to test both fundamental programming skills and the architectural insight needed for building, deploying, and maintaining cloud platforms. If you’re seeking new opportunities in the UK’s thriving cloud sector, www.cloudcomputingjobs.co.uk is an excellent place to start. You’ll find roles spanning everything from core infrastructure engineering to hybrid cloud consulting. Let’s begin your interview prep journey now.

🍪 We use cookies to enhance your browsing experience on our website. By continuing to use this site, you consent to the use of cookies as described in our Cookie Policy. You can review our Cookie Policy for more information.