Security Engineer

ITV plc; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

ITV plc is seeking a skilled Security Engineer to join our Security Engineering team. You will be embedded with a devolved product team, promoting secure SDLC practices across the development lifecycle and helping build and operate bespoke security services for ITV.

In this hybrid UK-wide role, you will advise engineers, implement cloud-native security controls, and support the rollout of commercial tooling such as SIEM, SAST and CNAPP across ITV.

Qualifications

• Experience in security engineering within a product development environment.
• Strong understanding of cloud security controls (IAM, least privilege).
• Knowledge of common security weaknesses and mitigations in modern environments.
• Ability to pragmatically introduce security controls across teams.
• Excellent communication skills with stakeholders at all levels.

Responsibilities

• Develop serverless functions and automate processes using programming languages.
• Build event-driven architectures in AWS with infrastructure-as-code.
• Provide security guidance and support to product teams.
• Identify cloud risks and implement mitigations.
• Suggest security improvements for technologies and processes.
• Contribute to cyber awareness training and events across ITV.

Skills

Security engineering

Cloud security

IAM in cloud

Infrastructure as code

AWS

Security tooling

Communication

Autonomy

Tools

AWS

IaC tooling

SIEM

SAST

CNAPP

Job description

Security Engineer

Office location; UK Wide | Hybrid, London, Manchester, Leeds

Main purpose of the role:

ITV is currently seeking a skilled Security Engineer to join our Security Engineering team. This role will be embedded with one of our devolved product teams, and will involve promoting and embedding strong security practices throughout the development lifecycle using the latest technology and processes offered by our Core Security Engineering team. As the subject matter expert, you will provide guidance and advice to the product team's engineers, and act as a single point of contact between the team and the wider Cyber Security department. Additionally, you will maintain a close relationship with our Core Security Engineering team to relay your product team's requirements, and help design, build, operate, and maintain the bespoke in-house services that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing some of the UK’s most beloved content.

Specific responsibilities:

• Use programming languages to develop serverless functions and automate processes
• Create event-driven architectures within AWS using infrastructure-as-code tooling
• Provide security expertise and support to business teams
• Proactively identify risks to our cloud environments and implement mitigations
• Identify and suggest security improvements for technologies, processes, and new initiatives
• Contribute to the plan and strategy for delivering cyber awareness training and events across ITV

At ITV, we aspire to be a digitally led company that delivers brilliant content to global audiences wherever, whenever, and however they choose. To achieve our goals, we need to offer agile, reliable, and scalable security solutions that deliver security by design without compromise.

The ideal candidate will have experience working with a modern technology stack and a strong interest in Cyber Security. The applicant will be required to gain familiarity with a variety of security tools, and professional training will be provided and customised to the individual. However, we believe in learning on the job, so we welcome applicants with a desire to build their skills and focus on security in the long term.

To be considered for this opportunity, you must demonstrate the following skills:

• Good understanding of security controls (e.g. IAM) within cloud environments
• Up-to-date knowledge of common security weaknesses and associated mitigations within modern environments
• Ability to pragmatically introduce security controls
• Strong communication skills and the ability to work with all stakeholders
• Autonomy and initiative in identifying and resolving problems across the business
• Previous experience developing cloud-native applications using infrastructure-as-code best practices