Security Engineer (SaaS)

About the role

CreditorWatch is building a dedicated Security Engineering function to operate, tune, and integrate security platforms across its SaaS environment. The Security Engineer will work on both enterprise/internal security and product security, partnering with engineering teams to embed security throughout the development lifecycle.

Key responsibilities

• Improve security posture of SaaS platforms, employee endpoints, and office networks by implementing and operating solutions such as SSE, EDR, DLP, Email Security, and IAM.
• Enhance threat detection and response, maintain runbooks, and own security alert workflows.
• Conduct security reviews, threat modelling, and risk‑based assessments for applications and the SDLC.
• Embed security controls (SAST, SCA, secrets detection) into CI/CD pipelines with clear ownership and automated feedback.
• Mentor engineers, provide guidance on secure development practices, and support vulnerability management and incident response.
• Assist compliance activities for ISO 27001 and SOC 2.

Required profile

• Hands‑on experience across multiple security domains as a broad generalist.
• Experience with application security, secure code review, SAST/SCA tooling, threat modelling, and vulnerability management in cloud‑native or SaaS environments.
• Working knowledge of cloud security (preferably AWS) and related services.
• Familiarity with enterprise security tools such as EDR, SSE/SWG, DLP, and email security.
• Strong communication skills to translate findings for engineers and non‑technical stakeholders.

Required skills

• IAM, Zero Trust, DLP, SSE, EDR
• Application security, vulnerability management, threat modelling
• CI/CD pipeline security (SAST, SCA, secrets detection)
• AWS services (Security Hub, Inspector, GuardDuty)
• Python, Bash, API automation
• Identity protocols (OAuth, OIDC, SAML)
• Compliance frameworks (ISO 27001, SOC 2, OWASP Top 10)

What we offer

• Fitness First Platinum gym membership
• Barista‑made coffee, breakfast, snacks and lunches
• $50 monthly phone credit
• Additional wellness day each month
• Monthly in‑house massages
• Performance‑based bonus and employee share scheme
• Regular team activities (sailing, pasta‑making, go‑karting, company boat)
• Free legal services for employees