Security Engineer

The role

You will be the security authority for a greenfield digital news platform. You will validate controls across a composable CMS, video pipeline, advertising integrations, personalisation services, and public-facing APIs.

What you will do

• Define and validate application and platform security controls across all delivery phases.
• Perform architecture and threat-model reviews at design stage and as the platform evolves.
• Review authentication, authorization, and privileged-access controls across CMS, APIs, and integrated services.
• Validate API and integration security across a composable, multi-vendor platform architecture.
• Review secrets, credentials, and token-management practices across the full stack.
• Support vulnerability scanning and penetration-testing activities.
• Validate encryption and secure data handling across storage, transit, and third-party integrations.
• Review security logging, monitoring, and incident-response requirements.
• Support GDPR and privacy engineering requirements throughout delivery.
• Conduct third-party security assessments for integrated services and vendors.

Required qualifications

• 5+ years of experience in application security, security engineering, or a closely related role.
• Experience performing threat modelling and architecture security reviews on complex, multi-component platforms.
• Strong knowledge of authentication and authorization patterns — OAuth, OIDC, RBAC, privileged access management.
• Hands-on experience validating API security and reviewing integration patterns across third-party services.
• Solid understanding of secrets management, credential handling, and token lifecycle best practices.
• Experience supporting or coordinating vulnerability scanning and penetration testing programmes.
• Knowledge of encryption standards and secure data handling practices across storage and transit.
• Familiarity with GDPR and privacy-by-design engineering requirements.
• Ability to produce clear remediation guidance and security acceptance documentation for engineering and delivery teams.

Nice to have

• Experience securing composable CMS or media platform architectures — AEM, Amplience, or similar.
• Background working on high-traffic, public-facing platforms where availability and security intersect.
• Experience with security logging and monitoring tooling — SIEM, alerting, incident response playbooks.
• Familiarity with third-party vendor security assessment processes.
• Relevant certification — CISSP, OSCP, CEH, or equivalent.
• Experience working within a phased, full-lifecycle delivery programme alongside engineering and architecture teams.

Benefits

• Shape real-world AI-driven projects across key industries.
• Be part of a global team with equal opportunities for collaboration across continents and cultures.
• Inclusive environment that prioritizes continuous learning, innovation, and ethical AI standards.

About the company

Solvd Inc. is a rapidly growing AI-native consulting and technology services firm delivering enterprise transformation across cloud, data, software engineering, and artificial intelligence. Following the acquisition of Tooploox, Solvd now offers end-to-end delivery from strategic advisory to custom AI development.