Engineer, Cloud Security

Itv; Greater London, Manchester, Leeds; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

ITV is seeking a Security Engineer to join the Security Engineering team. This role will be embedded with a devolved product team, promoting and embedding security throughout the development lifecycle using the latest tools from our Core Security Engineering group.

You will guide engineers and act as the liaison between the product team and Cyber Security. The ideal candidate will understand cloud security controls (IAM), stay current on weaknesses and mitigations, and be able to pragmatically

Qualifications

• Experience with modern technology stacks and cloud environments.
• Knowledge of security tooling such as SIEM, SAST, CNAPP.
• Ability to communicate with stakeholders and drive security practices.
• Autonomy to identify and resolve security issues across the business.

Responsibilities

• Develop serverless functions using programming languages.
• Create event-driven architectures in AWS with IaC tooling.
• Provide security expertise to business teams.
• Identify and mitigate risks in cloud environments.
• Support security awareness training and events.
• Collaborate with the Core Security Engineering team.

Skills

IAM in cloud

Cloud security

Security controls

Communication

Autonomy

Tools

SIEM

SAST

CNAPP

Job description

Office location; UK Wide | Hybrid, London, Manchester, Leeds

Main purpose of the role:

ITV is currently seeking a skilled Security Engineer to join our Security Engineering team. This role will be embedded with one of our devolved product teams, and will involve promoting and embedding strong security practices throughout the development lifecycle using the latest technology and processes offered by our Core Security Engineering team. As the subject matter expert, you will provide guidance and advice to the product team's engineers, and act as a single point of contact between the team and the wider Cyber Security department. Additionally, you will maintain a close relationship with our Core Security Engineering team to relay your product team's requirements, and help design, build, operate, and maintain the bespoke in-house services that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing some of the UK’s most beloved content.

Specific responsibilities:

• Use programming languages to develop serverless functions and automate processes
• Create event-driven architectures within AWS using infrastructure-as-code tooling
• Provide security expertise and support to business teams
• Proactively identify risks to our cloud environments and implement mitigations
• Identify and suggest security improvements for technologies, processes, and new initiatives
• Contribute to the plan and strategy for delivering cyber awareness training and events across ITV

At ITV, we aspire to be a digitally led company that delivers brilliant content to global audiences wherever, whenever, and however they choose. To achieve our goals, we need to offer agile, reliable, and scalable security solutions that deliver security by design without compromise.

The ideal candidate will have experience working with a modern technology stack and a strong interest in Cyber Security. The applicant will be required to gain familiarity with a variety of security tools, and professional training will be provided and customised to the individual. However, we believe in learning on the job, so we welcome applicants with a desire to build their skills and focus on security in the long term.

To be considered for this opportunity, you must demonstrate the following skills:

• Good understanding of security controls (e.g. IAM) within cloud environments
• Up-to-date knowledge of common security weaknesses and associated mitigations within modern environments
• Ability to pragmatically introduce security controls
• Strong communication skills and the ability to work with all stakeholders
• Autonomy and initiative in identifying and resolving problems across the business