Senior Security Engineer

With significant executive support and sponsorship, our financial services client has launched a multi-year project to redevelop and modernise the full technology and security stack. To support this and maintain risk exposure, they are making a significant investment in the Information Security team, processes, and technology. This is a chance to join a small tight-knit Security Engineering team at an exciting time where we are designing and building the core services.

If you like working on designs for high scale, leading-edge, and operating in a truly cloud-native fashion, then we want to hear from you!

Responsibilities:

• You will be part of the Security Engineering team - helping design, implement and support key services.
• We’re a hands-on engineering team. We partner with the broader engineering organisation and also build and support our own capabilities across IT Security, IAM, SDLC, and Security Architecture practices.
• Strong hands-on experience working with major cloud solutions (IaaS, PaaS, Event-driven / Serverless, SaaS) AWS and/or Azure.
• Capable of designing, implementing, and maintaining robust solutions and re-usable patterns that reduce risk across the organisation.
• Develop policy as code, templates, and modules to implement and enforce secure patterns and guidance.
• Working with Infrastructure as Code, Containers, and CI/CD concepts.
• Clearly articulate and communicate the value of a security control vs the friction it may introduce – a credible peer within engineering.
• An interest in threat modelling as a medium to demonstrate the impact of security and robust Security Architecture’s for protecting organisations.

Skills & Experience

• 5+ years of relevant technical experience as a Security Engineer or Software Engineer
• Strong cloud and cloud native experience.
• Strong communication skills. Ability to communicate at all levels with both technical and executive stakeholders.
• A high-level understanding of security principles, control frameworks (NIST preferred), and security risks as they apply to cloud solutions.
• A good understanding of the latest security threats, threat actors, and the tactics and techniques adopted.