Security Engineer

CFC; City Of London; Sur place; GBP 65 000 - 90 000; Plein temps

Résumé du poste

CFC, based in London, is seeking a Security Engineer to strengthen detection and response capabilities and to help manage identity, access, and data protection across services. The role involves implementing and operating security controls, performing incident response, threat hunting, and driving secure development practices with engineers.

You will translate reviews into concrete changes, balance AI/data protections, and ensure runbooks stay usable for the next responder.

Qualifications

• Experience in at least one security domain (detection/response, identity and access, data protection, product security or control assurance) in a regulated environment.
• Working knowledge of CI/CD, cloud services and how a change moves from build to production.
• Experience turning a security review or a threat assessment into a concrete change.
• Judgement to apply data protection and AI controls in proportion to the system and the data.
• Clear writing and speaking with engineers and with colleagues outside security.
• Keen security mindset with analytical and problem-solving skills, capable of assessing complex risks and delivering practical, risk-informed solutions.
• Habit of leaving the runbook, the review and the report in a state the next person can use.

Responsabilités

• Improve detection rules, alerts and logs for network and endpoint activity.
• Conduct incident response for complex cases, from investigation through containment and recovery.
• Conduct threat assessments, including attack-path reviews and threat hunts, and record intelligence and requirements.
• Analyze vulnerability and misconfiguration findings across software, tests, pipelines, malware defences, and network infrastructure, implementing controls for each finding.
• Produce security design reviews for projects and embed security checks into definitions of ready and done.
• Improve conditional access, privileged access, device verification and joiner/mover/leaver processes, and manage over-privileged permissions in access reviews.
• Implement data protection controls for new sensitive stores, including encryption, privacy requests, and disposal; record classifications in data inventory.
• Prepare evidence for control tests and audits, checking against asset inventory and updating monitoring rules.
• Build workflow automation and analytics for repeated security tasks, and publish the runbook.
• Coordinate incident exercises against continuity plan and deliver awareness training for colleagues.

Connaissances

Detection and response

Identity and access

Data protection

Product security

Control assurance

CI/CD

Cloud services

Change management

Written communication

Analytical thinking

Description du poste

Security Engineer

Department: CISO

Employment Type: Permanent - Full Time

Location: UK - London

Description

At CFC, technology is at the heart of everything we do. We are looking for Security Engineers to improve the services they own, handle the complex and new problems those services produce, and take projects through to improved operational controls.

You will implement and operate controls in detection and response, identity and access, data protection, product security, or control assurance. The responsibilities below are a broad sample of security engineering across the information security function. You will specialise in a few and have a working knowledge of the rest.

About the role

• Improve detection rules, alerts and logs for network and endpoint activity so coverage fits CFC's technology and the current threat picture, and stores the revised rules.
• Conduct incident response for complex cases, from investigation through containment and recovery, and files the incident report with the revised playbook.
• Conduct threat assessments, including attack-path reviews and threat hunts, and records the intelligence and the new requirements that come out of them.
• Analyse vulnerability and misconfiguration findings in software, application security tests, the build pipeline, malware defences, email and web protection, secure configuration and network infrastructure, and implements the control for each confirmed finding.
• Produce the security design review for projects and writes security and privacy checks into the definitions of ready and done.
• Improve conditional access, privileged access, device verification and joiner, mover and leaver processing, and records excessive permissions in the access review.
• Implement data protection controls for new sensitive stores, covering loss prevention, encryption, privacy requests, insider detection and disposal, and records the classification in the data inventory.
• Prepare evidence for control tests and audits, checks it against the asset inventory, and updates the monitoring rules where coverage is missing.
• Build workflow automation and analytics for repeated security tasks, and publishes the runbook.
• Coordinate incident exercises and tabletops against the continuity plan, and produces the awareness training CFC colleagues use.

About you

• Experience in at least one of detection and response, identity and access, data protection, product security or control assurance, in a regulated environment
• Working knowledge of CI/CD, cloud services and how a change moves from build to production
• Experience turning a security review or a threat assessment into a concrete change
• Judgement to apply data protection and AI controls in proportion to the system and the data
• Clear writing and speaking, including with engineers and with colleagues outside security
• Keen security mindset with excellent analytical and problem-solving skills, capable of assessing complex risks, identifying root causes, and delivering practical, threat and risk-informed solutions.
• A habit of leaving the runbook, the review and the report in a state the next person can use

Core Values

Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.

Challenge everything:
We're never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.

Have fun, be good:
Insurance is a serious business, but we don't take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.