Cyber Security Engineer *INSURANCE EXPERIENCED*

Intertek Holding Deutschland GmbH; London; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A leading company in the financial services sector is seeking a Cyber Security Engineer with strong experience in application security and hands-on coding. The role includes driving secure development practices, conducting threat modelling, and integrating security controls within CI/CD pipelines. Ideal candidates will have a deep understanding of GCP/Azure security and exhibit excellent communication skills.

Qualifications

• Hands-on experience in AppSec with software engineering or DevOps background.
• Deep knowledge of GCP or Azure security.
• Experience with Kubernetes and container security.

Responsibilities

• Lead threat modelling, secure design reviews, and AppSec assessments.
• Integrate and automate SAST, DAST, SCA in CI/CD.
• Run internal pen testing and security assessments.

Skills

AppSec

Vulnerability Management

Threat Modelling

Cloud Security

Communication

Tools

Terraform

Python

CI/CD

Kubernetes

GCP

Azure

Job description

Job Title:
Cyber Security Engineer - MUST HAVE INSURANCE EXPERIENCE

Department:
Cyber Security

Reports To:
Head of Security Architecture & Engineering

Salary: £600 Per Day Inside IR35

Location: Central London (3 days per week on site, 2 days per week remote)

The Role

We're looking for a hands-on Application Security Engineer with a strong engineering mindset and a background in financial services, insurance, or fintech. You'll be embedded with product and engineering teams, driving secure development practices and owning security controls across our SDLC and cloud-native platforms.

This is a technical role, not for architects or managers - you'll be writing code, integrating tools, running threat modelling sessions, and solving real-world security problems.

What You'll Do

• Lead threat modelling, secure design reviews, and AppSec assessments.
• Integrate and automate SAST, DAST, SCA, and container scanning in CI/CD.
• Triage and drive remediation of vulnerabilities across cloud and app layers.
• Deliver security controls via code (Terraform, YAML, scripting).
• Support and improve cloud security posture (GCP/Azure).
• Run internal pen testing and security assessments.
• Build and manage a Security Champions network.
• Be a visible, vocal SME on all things AppSec.

What You'll Bring

• Strong hands-on experience in AppSec with a background in software engineering or DevOps.
• Deep knowledge of GCP (preferred) or Azure security.
• Experience with Kubernetes, container security, and cloud infra.
• Proficiency in IaC (Terraform), scripting (Python, etc.), and CI/CD pipelines.
• Excellent communication skills - clear, concise, and credible with engineers.
• Exposure to regulated environments (FS, insurance, fintech) is a big plus.

Not for You If...

You're an architect, people manager, or hands-off strategist. This is for engineers who deliver.

Eames Consulting is acting as an Employment Business in relation to this vacancy.