Enterprise Security Engineer

M&G plc.; Stirling; On-site; GBP 45,000 - 65,000; Full time

Job summary

A leading company in the financial services sector seeks a Security Engineer to strengthen security measures across applications and networks. The ideal candidate will have a solid background in various security practices, including vulnerability assessment and cloud security. A commitment to diversity and inclusion is central to our recruitment process, encouraging applicants from all backgrounds.

Qualifications

• At least 2 years of experience in security engineering or application security.
• Deep understanding of Windows and Linux hardening.
• Experience with Microsoft Azure, Kubernetes, and SaaS/PaaS solutions.

Responsibilities

• Conduct application security reviews and analyze vulnerabilities.
• Collaborate on security tooling improvements and report findings.
• Automate processes focusing on security by design.

Skills

Threat modeling

Secure coding

Identity management

Software development

Cryptography

System administration

Network security

Problem-solving

Debugging

Troubleshooting

Education

BSc in Computer Science

Tools

Jira

Confluence

Azure DevOps

GitHub

Jenkins

Job description

Social network you want to login/join with:

Responsibilities

1. Conduct application security reviews. Collaborate with Security SDLC tooling and key teams within Security Operations to ensure the secure delivery of third-party libraries and application container images.
2. Investigate and analyze suspected vulnerabilities and weak security controls across various business units.
3. Quantify and communicate security risks as business risks to inform stakeholders of security findings.
4. Work closely with security operations teams on reported or suspected vulnerabilities, emerging threats, incidents, and continuous development tooling improvements.
5. Deliver and enhance security metrics.
6. Automate continuous improvement and development processes with a focus on security by design.
7. Develop and maintain relationships with key stakeholders across the business and technology areas.

Qualifications

1. BSc in Computer Science or related field, or equivalent work experience.
2. At least 2 years of experience in threat modeling, secure coding, identity management, authentication, software development, cryptography, system administration, or network security.
3. Minimum of 2 years in security engineering, system and network security, or application security.
4. Deep understanding of Windows and Linux hardening, containerization, and cloud security controls.
5. Experience with cloud and container technologies, especially Microsoft Azure, Red Hat OpenShift/Kubernetes, and SaaS/PaaS solutions.
6. Experience integrating security tooling within deployment pipelines.
7. Familiarity with agile practices and tools like Jira, Confluence, Azure DevOps, GitHub, Jenkins.
8. Exposure to compliance frameworks such as FedRAMP, SOC-2, PCI, ISO 27001, GDPR.
9. Strong interpersonal, analytical, problem-solving, debugging, and troubleshooting skills.
10. Proficiency in technologies such as Java, Python, PowerShell, Bash, Terraform, Azure ARM, KQL.
11. Hands-on decision-making ability.

We value diversity and inclusion at M&G plc. We encourage applications from candidates of all backgrounds, including those with disabilities or neurodivergent conditions. If you need assistance or alternative application methods, contact us at: careers@mandg.