Lead Security Engineer: Attack Surface & Cloud Defense (Hybrid)

Wellington Management; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Office 4 days/week, remote 1 day

Job summary

Wellington Management in London seeks a Senior Systems Engineer to fortify attack surfaces through vulnerability management, CNAPP usage, and secure software development lifecycle practices. You will automate security workflows and drive hardening baselines in partnership with development and risk teams.

The role requires hands-on experience with vulnerability platforms, scripting, and cloud security, with a strong inclination toward curious problem-solving and collaboration across global teams.

Qualifications

• BS degree in Information Systems or related IT field.
• Experience creating new processes to address evolving attack surfaces.
• Excellent written and spoken communication across diverse teams.
• Ability to mentor junior team members.

Responsibilities

• Perform vulnerability assessments and communicate risk to stakeholders.
• Leverage CNAPP and guidance to fix issues.
• Bridge security with development in the SDLC and CI/CD pipelines.
• Lead urgent vulnerability responses and misconfiguration events.
• Automate workflows using scripting and AI to shorten delivery times.
• Develop and mature internal security baselines aligned with CIS Controls.
• Stay updated on threats and map them to attack surfaces.
• Review threat intel for vulnerabilities affecting Wellington.
• Collaborate with Third-Party Risk to assess ecosystem exposures.
• Contribute to team docs on processes and tools.

Skills

Curiosity

Communication

Mentoring

Global teamwork

Threat intelligence

Education

BS degree in Information Systems/related discipline

Tools

WIZ CNAPP

Qualys

Python

AWS IaC

Splunk

JFrog Artifactory

JFrog Curation

ServiceNow

Azure

MS Intune

Anthropic Claude

Job description

Wellington Management in London seeks a Senior Systems Engineer to fortify attack surfaces through vulnerability management, CNAPP usage, and secure software development lifecycle practices. You will automate security workflows and drive hardening baselines in partnership with development and risk teams.

The role requires hands-on experience with vulnerability platforms, scripting, and cloud security, with a strong inclination toward curious problem-solving and collaboration across global teams.