Security Engineer

ITV; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

ITV is seeking a Security Engineer to join the Security Engineering team. The role is embedded with a devolved product team and focuses on promoting secure development practices across the lifecycle, advising engineers, and coordinating with the Cyber Security department.

You will help design and operate in-house security services and support tooling like SIEM and CNAPP. The role requires hands-on work with modern tech stacks, cloud environments, and the ability to communicate security concepts

Qualifications

• Experience with cloud security and IAM controls.
• Knowledge of common security weaknesses and mitigations.
• Ability to pragmatically introduce security controls.
• Strong written and verbal communication with stakeholders.
• Proactive in identifying and resolving security issues.

Responsibilities

• Use programming languages to develop serverless functions and automate processes
• Create event-driven architectures within AWS using infrastructure-as-code tooling
• Provide security expertise and support to business teams
• Proactively identify risks to our cloud environments and implement mitigations
• Identify and suggest security improvements for technologies, processes, and new initiatives
• Contribute to the plan and strategy for delivering cyber awareness training and events across ITV

Skills

IAM in cloud

Security controls

Security engineering

Communications

Autonomy

Job description

Office location; UK Wide | Hybrid, London, Manchester, Leeds

The Role

ITV is currently seeking a skilled Security Engineer to join our Security Engineering team. This role will be embedded with one of our devolved product teams, and will involve promoting and embedding strong security practices throughout the development lifecycle using the latest technology and processes offered by our Core Security Engineering team. As the subject matter expert, you will provide guidance and advice to the product team's engineers, and act as a single point of contact between the team and the wider Cyber Security department. Additionally, you will maintain a close relationship with our Core Security Engineering team to relay your product team's requirements, and help design, build, operate, and maintain the bespoke in-house services that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our 'More than TV' strategy and play a critical role in securing some of the UK's most beloved content.

Specific responsibilities:

• Use programming languages to develop serverless functions and automate processes
• Create event-driven architectures within AWS using infrastructure-as-code tooling
• Provide security expertise and support to business teams
• Proactively identify risks to our cloud environments and implement mitigations
• Identify and suggest security improvements for technologies, processes, and new initiatives
• Contribute to the plan and strategy for delivering cyber awareness training and events across ITV

At ITV, we aspire to be a digitally led company that delivers brilliant content to global audiences wherever, whenever, and however they choose. To achieve our goals, we need to offer agile, reliable, and scalable security solutions that deliver security by design without compromise.

The ideal candidate will have experience working with a modern technology stack and a strong interest in Cyber Security. The applicant will be required to gain familiarity with a variety of security tools, and professional training will be provided and customised to the individual. However, we believe in learning on the job, so we welcome applicants with a desire to build their skills and focus on security in the long term.

Skills Required:

• Good understanding of security controls (e.g. IAM) within cloud environments
• Up-to-date knowledge of common security weaknesses and associated mitigations within modern environments
• Ability to pragmatically introduce security controls
• Strong communication skills and the ability to work with all stakeholders
• Autonomy and initiative in identifying and resolving problems across the business