Security Engineer: Detect, Respond & Protect Data

CFC; City Of London; On-site; GBP 65,000 - 90,000; Full time

Job summary

CFC, based in London, is seeking a Security Engineer to strengthen detection and response capabilities and to help manage identity, access, and data protection across services. The role involves implementing and operating security controls, performing incident response, threat hunting, and driving secure development practices with engineers.

You will translate reviews into concrete changes, balance AI/data protections, and ensure runbooks stay usable for the next responder.

Qualifications

• Experience in at least one security domain (detection/response, identity and access, data protection, product security or control assurance) in a regulated environment.
• Working knowledge of CI/CD, cloud services and how a change moves from build to production.
• Experience turning a security review or a threat assessment into a concrete change.
• Judgement to apply data protection and AI controls in proportion to the system and the data.
• Clear writing and speaking with engineers and with colleagues outside security.
• Keen security mindset with analytical and problem-solving skills, capable of assessing complex risks and delivering practical, risk-informed solutions.
• Habit of leaving the runbook, the review and the report in a state the next person can use.

Responsibilities

• Improve detection rules, alerts and logs for network and endpoint activity.
• Conduct incident response for complex cases, from investigation through containment and recovery.
• Conduct threat assessments, including attack-path reviews and threat hunts, and record intelligence and requirements.
• Analyze vulnerability and misconfiguration findings across software, tests, pipelines, malware defences, and network infrastructure, implementing controls for each finding.
• Produce security design reviews for projects and embed security checks into definitions of ready and done.
• Improve conditional access, privileged access, device verification and joiner/mover/leaver processes, and manage over-privileged permissions in access reviews.
• Implement data protection controls for new sensitive stores, including encryption, privacy requests, and disposal; record classifications in data inventory.
• Prepare evidence for control tests and audits, checking against asset inventory and updating monitoring rules.
• Build workflow automation and analytics for repeated security tasks, and publish the runbook.
• Coordinate incident exercises against continuity plan and deliver awareness training for colleagues.

Skills

Detection and response

Identity and access

Data protection

Product security

Control assurance

CI/CD

Cloud services

Change management

Written communication

Analytical thinking

Job description

CFC, based in London, is seeking a Security Engineer to strengthen detection and response capabilities and to help manage identity, access, and data protection across services. The role involves implementing and operating security controls, performing incident response, threat hunting, and driving secure development practices with engineers.

You will translate reviews into concrete changes, balance AI/data protections, and ensure runbooks stay usable for the next responder.