Security Engineer

Direct Line Group; London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading company in the insurance sector is seeking a Security Engineer to join their Cyber Defence Centre. This role involves maintaining security integrity, improving integration pipelines, and ensuring compliance with security standards. The position is hybrid, offering flexibility with two days a week in the London or Bristol office. The ideal candidate will have a background in Computer Science or Engineering and expertise in security technologies. Join a diverse team focused on innovation and customer protection while enjoying excellent benefits.

Benefits

9% employer contributed pension

50% off home, motor, and pet insurance

Up to 10% annual bonus

25 days holiday plus bank holidays

Health and Dental insurance

EV car scheme

Buy as you earn share scheme

Employee discounts and cashback

Qualifications

• In-depth knowledge of routing, TCP/IP, and network security management.
• Expertise in Web Application & Network Firewalls, IDS/IPS, and SIEM.
• Strong foundation in algorithms, data structures, and tool development.

Responsibilities

• Maintain overall security integrity of DLG's environment.
• Improve secure, continuous integration pipelines with developers.
• Support projects ensuring alignment with security architecture.

Skills

Network Infrastructure

Security Technologies

Security Management

Technical Proficiency

Education

Computer Science

Engineering

Information Security

STEM

Tools

Microsoft Security Tooling

Job description

DLG is evolving. Across every facet of our business, our teams are embracing new opportunities and putting customers at the heart of everything they do. By joining them, you'll have the opportunity to not just be recognised for your skills but encouraged to build upon them and empowered to do your absolute best.

Our CISO function is created by Cyber Defence Centre, Business Resilience, Privacy & Information Management, Strategy & Operating Office and Security Design, Innovation & Enablement.

What we look for

We are looking for a Security Engineer who will provide security-related technical and functional support for DLG security tooling and services, overseeing the delivery of security services to a high standard, and maintaining the health and effectiveness of controls to ensure we are adequately protected against existing and horizon threats identified by our Threat Intelligence and Operational Security teams.

Who you will work with

As a Security Engineer you will become a member of the Security Engineering team within the Cyber Defence Centre, and you will report to the Security Engineering Manager.

This is a 12-month Fixed Term Contract opportunity. This is a hybrid role with two working days a week from our London or Bristol office.

What you will do

• Maintain the overall security integrity of DLG's environment.

• Improve secure, continuous integration pipelines whilst working closely with our developers to advise on standard methodology.

• Support projects and change programmes ensuring that they align with the security architecture framework and that solutions meet relevant information security fundamentals.

• Maintain a technical assurance approach that provides confidence to colleagues whilst ensuring that the value of proposed changes will be achieved.

• Take responsibility and act as a technical SME for securing DLG's environments in line with compliance commitments.

• Ensure security technical platforms are configured to optimise the overall security offered to DLG.

• Improve Security Information and Event Management (SIEM) coverage of DLG's overall environment.

• Make sure that all changes to the production environment have been reviewed and approved.

• Communicate and build relationships at various levels with an ability to discuss deep technical concepts with counterparts from our suppliers but also communicate at a higher level with project managers and programme leads to convey the processes and timings of programme and project delivery.

• Develop technical security standards and ensure all changes are in line with the network security architecture.

What you will need

If you have Computer Science, Engineering, information security or STEM experience we would like to hear from you.

• Network Infrastructure: In-depth knowledge of routing, TCP/IP, Internet protocols, and network security management.
• Security Technologies: Expertise in Web Application & Network Firewalls, IDS/IPS, File Integrity Monitoring, SIEM, Advanced Endpoint Protection.
• Security Management: Advanced skills in vulnerability management, event management, application security, incident response, forensics, and encryption.
• Technical Proficiency: Strong foundation in algorithms, data structures, databases, networks, and tool development.

Desirable Skills

• Proficiency with Microsoft security tooling.
• Familiarity with Cyber Defence areas, including threat intelligence, detect and response, and engineering.
• Understanding of risk assessment in technical decision-making.
• Experience in financial environments.

Qualifications

• Essential certifications: CISM, CISSP, M.Inst.ISP, or CISA.
• Preferred certifications: GCIH or ECIH by recognized professional bodies.

What we'll give you in return:

We wouldn't be where we are today without our people and the wide variety of perspectives and life experiences they bring. That's why we offer excellent benefits to suit your lifestyle and a flexible working model combining the best parts of home and office-working, varying with the nature of your role.

Core benefits include:

9% employer contributed pension

50% off home, motor and pet insurance plus free travel insurance and Green Flag breakdown cover

Up to 10% annual bonus

25 days holiday (rising by 1 each year to 28) + bank holidays and option to buy or sell up to 5 days

Additional optional Health and Dental insurance

EV car scheme allows all colleagues to lease a brand new electric or plug-in hybrid car in a tax efficient way.

Buy as you earn share scheme

Employee discounts and cashback

Plus many more

Ways of Working

Our hybrid model way of working offers a 'best of both worlds' approach combining the best parts of home and office-working, offering flexibility for everyone. When you'll be in the office depends on your role, but most colleagues are in 2 days a week, and we'll consider the flexible working options that work best for you.

We recognise and embrace people that work in different ways so if you need any reasonable adjustments within this recruitment process, please reach out to us and we can discuss how we can support you with this.

We want everyone to get the most out of their time at DLG. Which is why we've looked beyond the financial rewards and created an offer that takes your whole life into account. Supporting our people to work at their best - whatever that looks like - and offering real choice, flexibility, and a greater work-life balance that means our people have time to focus on the things that matter most to them. Our benefits are about more than just the money you earn. They're about recognising who you are and the life you live.

Be yourself

Direct Line Group is an equal opportunity employer, and we think diversity of background and thinking is a big strength in our people. We're delighted to feature as one of the UK's Top 50 Inclusive Employers and are committed to making our business an inclusive place to work, where everyone can be themselves and succeed in their careers. We know you're more than a CV, and the things that make you, you, are what bring potential to our business. We recognise and embrace people that work in different ways so if you need any adjustments to our recruitment process, please speak to the recruitment team who will be happy to support you.

#LI-Hybrid

#LI-GY