Lead Security Engineer: Attack Surface & Cloud Risk

UNKNOWN; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Wellington Management is seeking a Lead Security Engineer to minimize attack surfaces through vulnerability management, cloud configuration assessments, and threat intelligence integration. You will build, automate, and improve security policies, standards, and processes across the development lifecycle.

The ideal candidate thrives on cyber-security, enjoys solving complex problems, and can work with global teams.

Qualifications

• BS degree in Information Systems/related discipline or equivalent IT work experience.
• Experience with vulnerability management platforms and prioritizing risk.
• Hands-on scripting with Python to automate routines.

Responsibilities

• Perform assessments and communicate exploitation likelihood and impact of vulnerabilities to stakeholders.
• Leverage CNAPP to guide fixes and advise application custodians.
• Act as a security liaison across SDLC and development teams.
• Assess Wellington CI/CD pipeline and advise on securing code.
• Lead urgent vulnerability responses and misconfiguration events.
• Automate workflows with scripting and AI to shorten output cycles.
• Develop and mature internal security baselines and hardening programs.
• Stay updated on cyber threats and advise mitigation strategies.
• Collaborate with Third-Party Risk to assess vendor exposure to vulnerabilities.
• Document updates to processes, tools, and workflows.

Skills

Vulnerability management

CNAPP

Cloud security

Scripting (Python)

IaC (AWS)

Threat intelligence

Security governance

Education

BS degree in Information Systems/related discipline

Tools

WIZ CNAPP

Qualys

Splunk

JFrog Artifactory

JFrog Curation

ServiceNow

AWS Services

Azure

MS Intune

Job description

Wellington Management is seeking a Lead Security Engineer to minimize attack surfaces through vulnerability management, cloud configuration assessments, and threat intelligence integration. You will build, automate, and improve security policies, standards, and processes across the development lifecycle.

The ideal candidate thrives on cyber-security, enjoys solving complex problems, and can work with global teams.