Cloud Security Engineer — IAM, IaC & AWS | Hybrid UK

Deaf Unity; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

ITV is seeking a skilled Security Engineer to join the Security Engineering team and embed strong security practices across the development lifecycle. You will act as a subject matter expert, guided by the Core Security Engineering team, and partner with devolved product teams to design, build, and maintain in-house security services.

You will implement commercial tooling such as SIEM, SAST, and CNAPP, while promoting secure design and agile security initiatives across the business.

Qualifications

• Good understanding of security controls (e.g. IAM) within cloud environments.
• Up-to-date knowledge of common security weaknesses and mitigations.
• Ability to pragmatically introduce security controls.
• Strong communication skills with stakeholders.
• Autonomy and initiative in resolving problems across the business.
• Experience developing cloud-native apps using infrastructure-as-code.

Responsibilities

• Use programming languages to develop serverless functions and automate processes.
• Create event-driven architectures within AWS using infrastructure-as-code tooling.
• Provide security expertise and support to business teams.
• Proactively identify risks to cloud environments and implement mitigations.
• Identify and suggest security improvements for technologies, processes, and new initiatives.
• Contribute to the plan and strategy for delivering cyber awareness training and events.

Skills

Security controls

Cloud security

IAM

Security best practices

Automation

Communication

Job description

ITV is seeking a skilled Security Engineer to join the Security Engineering team and embed strong security practices across the development lifecycle. You will act as a subject matter expert, guided by the Core Security Engineering team, and partner with devolved product teams to design, build, and maintain in-house security services.

You will implement commercial tooling such as SIEM, SAST, and CNAPP, while promoting secure design and agile security initiatives across the business.