Security Engineer

Location: Edinburgh

Job Title

Department

TSD Information Security-BG-UK

Overview of Department

Purpose of Role

As a Security Engineer at Baillie Gifford, you will be a key member of the Security Engineering team, responsible for building, integrating and maintaining the security capabilities that protect our systems, data and people.

Security Engineering bridges security and technology, creating secure-by-default platforms and controls that enable teams across the organisation to operate securely while continuing to move quickly. The team works closely with Infrastructure, Cloud, Development, DevOps and other security teams to embed security earlier in the technology lifecycle and reduce reliance on manual security processes.

In this role, you will take a hands-on approach to engineering and improving security capabilities across cloud, identity, endpoint, vulnerability management and the wider security technology estate. You will develop integrations, tooling and automation that improve security outcomes while simplifying how security is consumed by other teams.

You will help mature and optimise existing security investments rather than simply introducing new technology, ensuring our platforms are effectively integrated and aligned with business risk. The role offers opportunities to broaden your experience, working across areas such as security architecture, threat modelling, development, continuous control validation and emerging technologies including AI.

Responsibilities

Design, build, configure and maintain security platforms and protective controls across our technology environment, including XDR, SIEM, SOAR, cloud security and vulnerability management capabilities.

Develop security tooling, integrations and automation using APIs, scripting, SOAR and other engineering approaches, turning repetitive or manual processes into scalable and self-service capabilities where appropriate.

Support and improve identity security, privileged access and secrets management capabilities, including their integration across infrastructure and applications.

Support the firm to adopt AI securely by understanding emerging risks, contributing to practical guardrails and exploring ways AI can improve how we build, automate and deliver security.

Support and improve our cloud security posture and the integration of security testing and controls into CI/CD and development workflows.

Contribute to security architecture, technical design reviews and threat modelling, providing practical security guidance that helps technology teams understand risk and implement proportionate solutions.

Develop and maintain security orchestration, platform integrations and data flows that support security operations and incident response. Provide specialist engineering support during incidents where required.

Test and continuously validate security controls through configuration testing, attack simulation and Threat Informed Defence, using the results to improve preventative and detective controls.

Produce and maintain clear technical documentation for security platforms, integrations, architecture and engineered solutions.