Security Engineer - Software Security Enablement
Bloomberg LPLondon, United Kingdom
Added 12 Oct · still live
Likely
Sponsorship likelihood
This employer has issued visas recently
Not disclosed
Salary
Not disclosed by employer
£48,500
Going rate
Skilled Worker going rate
This role likely qualifies for a Skilled Worker visa
SOC 2135 (96% match) is an eligible occupation, with a going rate of £48,500, and Bloomberg LP is a licensed sponsor. That is our reading of the rules. Whether they issue a Certificate of Sponsorship is still their call.
Your salary route
New graduate or PhD holder? Pick one of the lower rates.
What each route needs for this job
| Occupation code | New entrant 70% of going rate | STEM PhD 80% of going rate | Relevant PhD 90% of going rate | Standard rate 100% of going rate |
|---|---|---|---|---|
2135 Cyber security professionals Most likely code | £34,000 | £38,800 | £43,700 | £48,500 |
We use the lowest threshold across the plausible codes. Likelihood is Possible at most when the pay clears only a lower rate, or only under a less likely code. How the Home Office picks the code
About the role
Security Engineer - Software Security Enablement
Bloomberg is building the world’s most trusted information network for financial professionals. We protect Bloomberg. We partner with internal departments to ensure the confidentiality, integrity, and availability of Bloomberg systems and the data we process. We aim to ensure that our clients see us as a trusted partner.
Our Chief Information Security Office (CISO) owns the technical aspects of this mission by ensuring Bloomberg products, systems, networks and commercial applications are built and maintained with security in mind.
What's the role?
We are seeking a Security Engineer to help ensure that Bloomberg software is built securely. You will be responsible for building and maintaining automated security capabilities across the software development lifecycle. You will also engage with engineering partners to provide remediation guidance and enhance security testing to deliver high-fidelity, actionable results.
As a member of the Security Enablement team, you will help provide automated security testing solutions for Bloomberg, including SAST, DAST, SCA, Secret searching and LLM-based assessments. Our team’s goal is to create preventative security capabilities that integrate into development pipelines and help detect issues early in the software development lifecycle.
An engineering skillset is required for this role. You will be responsible for prototyping new tools, integrating security testing tools and capabilities into the software development lifecycle, and developing custom security capabilities to deliver scalable testing solutions to our engineering teams. This role will routinely challenge your technical background and critical thinking. You will be expected to collaborate with different stakeholders in a fast-paced environment across many technology stacks and services.
We'll trust you to:
Location
LondonBusiness Area
Legal, Compliance, and RiskRef #
10050535 Our Team:Bloomberg is building the world’s most trusted information network for financial professionals. We protect Bloomberg. We partner with internal departments to ensure the confidentiality, integrity, and availability of Bloomberg systems and the data we process. We aim to ensure that our clients see us as a trusted partner.
Our Chief Information Security Office (CISO) owns the technical aspects of this mission by ensuring Bloomberg products, systems, networks and commercial applications are built and maintained with security in mind.
What's the role?
We are seeking a Security Engineer to help ensure that Bloomberg software is built securely. You will be responsible for building and maintaining automated security capabilities across the software development lifecycle. You will also engage with engineering partners to provide remediation guidance and enhance security testing to deliver high-fidelity, actionable results.
As a member of the Security Enablement team, you will help provide automated security testing solutions for Bloomberg, including SAST, DAST, SCA, Secret searching and LLM-based assessments. Our team’s goal is to create preventative security capabilities that integrate into development pipelines and help detect issues early in the software development lifecycle.
An engineering skillset is required for this role. You will be responsible for prototyping new tools, integrating security testing tools and capabilities into the software development lifecycle, and developing custom security capabilities to deliver scalable testing solutions to our engineering teams. This role will routinely challenge your technical background and critical thinking. You will be expected to collaborate with different stakeholders in a fast-paced environment across many technology stacks and services.
We'll trust you to:
Advertisement
- Partner with engineering stakeholders to understand Bloomberg’s development landscape and security needs. Develop automated security solutions that integrate into development pipelines.
- Maintain and enhance existing security automation processes and security capabilities.
- Understand and research technical details of core technology stacks and develop or enhance custom code analysis queries.
- Communicate vulnerability landscape and work on mitigations with stakeholders across the business.
- Actively monitor the latest news and trends in automated security capabilities, secure development, and AI-assisted security workflows.
- Develop and enhance operational run books
- Perform ad-hoc vulnerability discovery, including code review and static analysis for key engineering teams, applications and services.
- Build or adopt new security capabilities to address issues at scale, such as Software Composition Analysis, Secret searching, and other automated security testing techniques.
- Use LLMs and AI-assisted workflows as part of security assessments, vulnerability research, secure code review, developer enablement, and security automation.
- Explore, evaluate, and build automation using modern LLM tooling and integration patterns, including custom skills, MCP servers, agentic workflows, retrieval-augmented workflows, and integrations with development and security tooling.
- A strong core engineering background with a proven track record.
- 3+ years of experience in software development.
- Strong programming experience, with working knowledge of at least one of: C/C++, Python, JavaScript/TypeScript.
- Knowledge and experience with DevOps and software used in development pipelines (e.g. Github, Jenkins).
- Working knowledge of build systems, package managers, and development tooling (such as cmake, npm, maven, gradle etc).
We'd love to see (not required, but nice to have!):
- Experience or familiarity with running, maintaining, and customizing static analysis security testing tools such as CodeQL and Semgrep.
- Broad familiarity with programming language ecosystems and frameworks, particularly C++, JavaScript/TypeScript, Python, Java as well as well as modern systems and infrastructure languages such as Go and Rust
- Experience using LLMs or AI-assisted tools for security assessments, vulnerability research, secure code review, developer enablement, or security automation.
- Familiarity with LLM automation concepts and tooling, such as custom skills, MCP servers, agentic workflows, retrieval-augmented workflows, or integrations with development and security tooling.
- Knowledge of open source software component management, Software Composition Analysis, and related security tools.
- Knowledge of core concepts in public cloud providers such as AWS, GCP, and Azure. Familiarity with container orchestration technologies such as Kubernetes and Docker, and cloud deployment orchestration.
- Technical information security certifications, such as CISSP, CSSLP, or SANS certifications.
- Prior experience integrating security testing into DevOps pipelines.
If indicated, please note that years of experience are a guide; we will consider applications from all candidates who can demonstrate the skills necessary for the role. Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.
This description is the source posting as it read when we added it. We are not affiliated with Bloomberg LP, so check their own site for the current details.
Where this offer sits in the market
Cyber security professionals (SOC 2135) · UK · ONS ASHE 2025 · basic pay · ~30k in sampleSOC 2135
- Middle half £43,680–69,316
- Median £51,376
- Going rate £48,500
- Threshold £41,700
- New entrant £34,000–43,700
Similar sponsored roles
See all UK visa jobsNo close matches live right now.
Browse more sponsored jobs at Bloomberg LPAbout sponsorship for this role
Does this job guarantee visa sponsorship?
Not necessarily. Bloomberg LP holds a sponsor licence, but sponsorship for a specific hire is always the employer's decision. Be upfront in your application that you'll require it.
What salary is needed for this role to be eligible?
The offer must clear both the general threshold and the SOC 2135 going rate of £48,500. New-entrant and shortage discounts can lower it.