Cloud Security Engineer – AWS, IaC & DevSecOps

Itv; United Kingdom; Hybrid; GBP 65,000 - 80,000; Full time

Job summary

ITV is seeking a skilled Security Engineer to join the Security Engineering team and embed security practices across our development lifecycle. You will be the SME, guiding product engineers and acting as the contact between the team and the Cyber Security department.

You will design, build, operate and maintain bespoke in-house services and security tooling, such as SIEM, SAST, and CNAPP, while promoting secure-by-design principles across ITV's modern technology stack.

Qualifications

• Good understanding of security controls in cloud environments (e.g. IAM).
• Up-to-date knowledge of common security weaknesses and mitigations.
• Experience developing cloud-native applications using infrastructure-as-code best practices.
• Strong communication skills and the ability to work with all stakeholders.
• Autonomy and initiative in identifying and resolving problems across the business.

Responsibilities

• Use programming languages to develop serverless functions and automate processes.
• Create event-driven architectures within AWS using infrastructure-as-code tooling.
• Provide security expertise and support to business teams.
• Proactively identify risks to our cloud environments and implement mitigations.
• Identify and suggest security improvements for technologies, processes, and new initiatives.
• Contribute to the plan and strategy for delivering cyber awareness training and events across ITV.

Skills

IAM controls in cloud

Cloud security

Infrastructure as code

Serverless/AWS

Automation

Communication

Autonomy

Job description

ITV is seeking a skilled Security Engineer to join the Security Engineering team and embed security practices across our development lifecycle. You will be the SME, guiding product engineers and acting as the contact between the team and the Cyber Security department.

You will design, build, operate and maintain bespoke in-house services and security tooling, such as SIEM, SAST, and CNAPP, while promoting secure-by-design principles across ITV's modern technology stack.