Senior Security Enablement Engineer

Join Phorest, a leading provider of salon software, as a Senior Security Enablement Engineer. In this role, you will leverage your deep security expertise to enhance the security capabilities of our engineering teams. You will build security tooling and processes, identify risks and capability gaps, and drive impactful improvements. You will also coach others, share knowledge, and create scalable practices that raise the security bar for our Engineering Team.

Comfortable using AI tools to accelerate security work, generating, and analysing at pace while keeping your human judgment at the center of every decision

If you think you have what it takes, but don't necessarily meet every single point on the job description, please still get in touch. We'd love to have a chat and see if you could be a great fit

About Phorest

You are comfortable defining the problem, deciding your approach and owning the outcome

You can bridge technical and non-technical worlds

Phorest's engineering teams are sharp and want genuine security partnership, but not everyone in the company is technical, so you will need to be credible with both explaining risk clearly to technical and non technical audiences, and translating security requirements into practical engineering guidance

Responsibilities

• Collaborer avec les équipes d'ingénierie pour introduire des outils qui facilitent le codage sécurisé et identifier les opportunités d'amélioration.
• Travailler avec les équipes de produits et d'ingénierie pour intégrer la sécurité dans les pipelines CI/CD, l'environnement cloud et les flux de travail de révision de code.
• Identifier et évaluer les risques de sécurité émergents et les opportunités, et mener des analyses de risque exploratoires qui façonnent la feuille de route du programme de sécurité.

Requirements

• We’re looking for someone that creates momentum over responding to demand, we need someone who sees a risk or an opportunity, develops a point of view, and moves, keeping stakeholders informed along the way
• You seek feedback, challenge the status quo, embrace ambiguity and turn what you learn into action — sharing knowledge and raising the capability of those around you
• Comfortable working in a distributed team where you own outcomes end to end
• Familiarity with common vulnerability classes, OWASP, and secure SDLC frameworks

Comfortable working across SaaS, multi-tenant architectures

• Able to build trust with engineering teams without relying on authority
• Strong working knowledge of AWS security, IAM, GuardDuty, Security Hub, WAF, and related services
• Demonstrable Hands-on secure development experience (preferably 7+ years); you have written production code at some point in your career
• You bring the soft skills
• Deep enough experience in a security engineering or application security role to act as a subject matter expert for complex security challenges.

Strong communicator, written, verbal, and async

• Proactive in keeping stakeholders informed; you surface problems early rather than waiting to have answers
• Familiarity with Team Topologies or other platform/enabling team models
• Exposure to offensive security techniques, penetration testing, red teaming, or bug bounty

Preferred

• Experience working in a payments or regulated SaaS environment (PCI DSS, GDPR, HIPAA)
• Experience building security enablement or champion programmes that improve security capability and ownership across an engineering organisation