Security Engineer

About the role

Solvd Inc. is a rapidly growing AI-native consulting and technology services firm delivering enterprise transformation across cloud, data, software engineering, and artificial intelligence. We work with industry-leading organizations to design, build, and operationalize technology solutions that drive measurable business outcomes.

Following the acquisition of Tooploox, a premier AI and product development company, Solvd now offers true end-to-end delivery—from strategic advisory and solution design to custom AI development and enterprise-scale implementation. Our capability centers combine deep technical expertise, proven delivery methodologies, and sector-specific knowledge to address complex business challenges quickly and effectively.

We are looking for an Application Security Engineer to join a greenfield digital news platform build for a major international news brand. Security is not a pre-launch checklist here — it is an engineering requirement embedded across every phase of delivery, from architecture through launch and into multi-year support.

You'll be the security authority on a full-lifecycle engagement, validating controls across a composable CMS, video pipeline, advertising integrations, personalisation services, and public-facing APIs — on a platform designed to sustain extreme traffic during breaking-news events.

WHAT YOU'LL DO

- Define and validate application and platform security controls across all delivery phases.

- Perform architecture and threat-model reviews at design stage and as the platform evolves.

- Review authentication, authorization, and privileged-access controls across CMS, APIs, and integrated services.

- Validate API and integration security across a composable, multi-vendor platform architecture.

- Review secrets, credentials, and token-management practices across the full stack.

- Support vulnerability scanning and penetration-testing activities — coordinating findings and remediation.

- Validate encryption and secure data handling across storage, transit, and third-party integrations.

- Review security logging, monitoring, and incident-response requirements.

- Support GDPR and privacy engineering requirements throughout delivery.

- Conduct third-party security assessments for integrated services and vendors.

- Provide remediation guidance and produce security acceptance evidence ahead of launch.

BASIC QUALIFICATIONS

- 5+ years of experience in application security, security engineering, or a closely related role.

- Experience performing threat modelling and architecture security reviews on complex, multi-component platforms.

- Strong knowledge of authentication and authorization patterns — OAuth, OIDC, RBAC, privileged access management.

- Hands-on experience validating API security and reviewing integration patterns across third-party services.