Cyber Security Engineer - Blue Team (Ref: 198316)

Cyber Security Engineer – Blue Team & Continuous Security Validation

About the Role

We are seeking a hands-on Cyber Security Engineer specialising in Blue Team security, continuous security validation and AI security testing .

This role focuses on moving beyond traditional, periodic penetration testing towards automated, continuous validation of defensive security controls across cloud infrastructure, applications, AI systems and model supply chains.

You will be responsible for ensuring security controls are continuously tested against approved threat scenarios, findings are tracked through to remediation, and deployments meet defined security requirements.

This is a Blue Team engineering and control validation role, not a traditional SOC monitoring or standalone Red Team penetration testing position.

Key Responsibilities

• Continuous Security Validation: Operate automated security testing across cloud infrastructure, applications, AI systems and model supply chains for significant deployments.
• AI & LLM Security: Validate defensive controls against AI-specific threats, including prompt injection, jailbreaks and emerging LLM attack techniques.
• Threat Intelligence: Monitor MITRE ATLAS and OWASP LLM threat intelligence, translating new attack techniques into repeatable security test cases within a seven-day SLA.
• Security Findings Management: Aggregate, deduplicate and manage findings through DefectDojo and attestation workflows.
• Remediation & Deployment Gates: Enforce severity-based remediation SLAs and ensure required security controls are validated before redeployment approval.
• Security Reporting: Maintain Power BI dashboards tracking open findings, mean time to remediate (MTTR), pipeline gate pass rate and prompt injection block rate.
• Control Assurance: Execute validation against a Second Line of Defence (2LoD)-approved threat coverage matrix, providing measurable evidence of control effectiveness.
• Automation & Improvement: Develop and improve automated security validation processes, reducing reliance on periodic manual penetration testing.

Required Experience & Skills

• Proven experience in Blue Team security engineering, offensive security validation or continuous adversarial testing.
• Hands-on experience implementing automated security testing and continuous control validation.
• Experience with autonomous security testing tools such as AWS Security Agent, Horizon3 or equivalent.
• Practical exposure to AI red-teaming and LLM security tools such as Garak, PyRIT, Claude Security / Opus 4.x or Codex.
• Understanding of the OWASP LLM Top 10, MITRE ATLAS and AI/model supply-chain security risks.
• Experience with vulnerability management, security findings lifecycle management and remediation SLAs.
• Familiarity with Jira automation, security testing pipelines and Power BI reporting.
• Understanding of the 1LoD / 2LoD operating model, including the distinction between defensive control validation and independent red-team assurance.

What Success Looks Like

• Security controls are continuously validated across significant deployments.
• Emerging AI and cloud threats are incorporated into test suites within seven days.
• Security findings are prioritised, tracked and remediated against defined SLAs.
• Deployment approval is supported by measurable evidence of security control effectiveness.
• Security assurance becomes continuous, automated and measurable rather than periodic and reactive.