Security Engineer (Norwich, UK)

Badger Meter - Where Every Drop Counts and So Do You

Badger Meter is a leading global water technology company, with a mission to preserve and protect the world’s most precious resource.  For more than 120 years, cities and businesses have utilized our innovative and trusted solutions to enhance operational efficiency and conserve water while making it more affordable, clean and resilient. 

Every employee at Badger Meter is an important part of our success. We are committed to building a workplace where we shape a more sustainable future, celebrate differences, empower voices, and encourage fresh ideas that drive innovation. Just like every drop counts, at Badger Meter every employee counts because our contributions have a lasting impact on the world!

What You Will Contribute:

The Security Engineer is responsible for supporting cloud security operations at Badger Meter. The Security Engineer bridges the gap between cloud security, application deployment and secure  software development. The Security Engineer works with cloud security tools in AWS to support Badger Meter’s portfolio of SaaS applications products; working in collaboration with software engineers and cyber security engineers to ensure that cloud infrastructure and software deployments are secure and work as intended in accordance with company policies and procedures. 

Job Duties

Cloud Security & Risk Management

• Identify and deploy cloud security measures in AWS; perform vulnerability assessment and risk management

• Provision and configure new AWS accounts

• Build security controls into cloud infrastructure, automating wherever possible using Infrastructure-as-Code (Terraform)

• Knowledge of cloud security fundamentals — IAM, networking, secure configuration

Automation & DevOps

• Coding/application across core stack — read, review, and reason security issues in Python, Java, JavaScript, PHP, Rust, including: Identifying common vulnerability classes (injection, deserialization, auth/session flaws, memory safety issues in Rust, dependency/supply-chain risks), reviewing pull requests or scan findings with language-specific context rather than generic advice; working with development teams to remediate findings in their native language/framework; understanding secure coding practices and static/dynamic analysis tooling (SAST/DAST) across these languages

Monitoring & Compliance

• Collaborate with IT Cyber Security and Compliance teams on SOC 2/ISO27001 audits, penetration/vulnerability testing, and incident response exercises

• Work with the IT Cyber Security team to manage SIEM systems monitoring the AWS estate; build log ingestion pipelines and integrate new data sources to strengthen detection

• Assist with troubleshooting, incident management, and root cause analysis for security events

• Develop, execute, and track the performance of security measures in the SaaS cloud environment

• Document deployed security solutions for future reference

Collaboration & Culture

• Act as a security champion across engineering teams — mentoring, promoting best practice, and helping embed security as a shared responsibility

• Partner with software engineering, SQA, IT operations, and strategic services to design fit-for-purpose security solutions

• Remain current on cybersecurity trends and hacking techniques to inform cloud security design

Education and Experience

• Bachelor's Degree in Computer Science, Cyber Security or a related field

• 1+ years of experience in Software Engineering and/or DevSecOps

Qualifications

• OSCP (Offensive Security Professional) desired but not essential

• CYSA+ (CompTia Cybersecurity Analyst) desired but not essential

Skills & Experience

• AWS Security, Identity and Compliance tools (IAM, Security Hub, GuardDuty, Inspector, Detective, Shield, WAF, Control Tower) required

• Proficiency with AWS, Linux, shell scripting, Terraform (or other IaC tools), Jira (or other issue-tracking tools), GitHub (or other versioning tools)

• Strong scripting ability (Python and/or PowerShell), including API-driven automation

• Experience with CI/CD pipelines (AWS CodePipeline, Git-based workflows) to deploy security solutions at pace

• Application and offensive security awareness including: Working knowledge of application security, secure SDLC, and secure-by-design principles, including risks from AI/LLM-assisted development, exposure to threat modelling and offensive security concepts (pen testing, vulnerability assessment) to support engineering teams in building security into the SDLC and understanding of software supply chain security risks

• SIEM/log source integration experience

• Understanding of application security, secure SDLC, and offensive security concepts

• Ability to demonstrate analytical skills

• Ability to work independently with little supervision

Competencies

• Collaboration: Work collaboratively with others across the organization to achieve shared objectives

• Communication: Convey information and ideas clearly and concisely to individuals or groups in an engaging manner that helps them understand and retain the message; listen actively to others

• Initiating Action: Take prompt action to accomplish work goals; take action to achieve results beyond what is required; be proactive

• Work Standards: Setting high standards of performance for self and others; assuming responsibility and accountability for successfully completing assignments or tasks; self-imposing standards of excellence rather than having standards imposed

Benefits

• Competitive salary range, based on experience and qualifications

• 25 days of annual leave, plus 8 bank holidays

• 12 weeks of fully paid sick leave

• Auto-enrolment pension scheme with a salary sacrifice option

• Company-wide bonus scheme

• Private medical insurance, including dental and optical coverage

• Group life insurance for added peace of mind

• Access to an Employee Assistance Programme, provided by Headspace

• Hybrid working options, supporting flexibility and work-life balance

• Participation in the Cycle to Work scheme

• Annual health checks to support employee wellbeing

• Company-sponsored social events are held annually.

Additional information

• Type of Contract: Full-time (37.5 hours / week)

• Workplace type: On-site / Hybrid (three days on-site together with the team and two days working from home each week)

• Working hours: While the role follows standard UK working hours 9am – 5pm, flexibility will be required to support meetings and collaboration with our US-based colleagues.

• Location: Badger Meter UK | Business Centre Broadland Business Park Peachman Way Norwich Norfolk NR7 0WF

At Badger Meter, we see diversity and inclusion in all its dimensions as a strength of our globally operating organisation. As an equal opportunity employer, we make our personnel decisions regardless of gender identity, ethnicity, religion and belief, age, sexual orientation, national origin or disability.

Privacy Statement

The Employee and Applicant Privacy Statement describes how we collect, use, share, retain, and safeguard applicant information.  Please see the privacy statement on our website here.