Security Engineer: Detection, Response & Data Protection (London)

CFC Underwriting; Greater London; On-site; GBP 70,000 - 95,000; Full time

Job summary

CFC Underwriting in London is seeking a Security Engineer to join the CISO team. You will implement and operate controls across detection and response, identity and access, and data protection, helping improve security across services and projects.

You will work on incident response, threat assessments, vulnerability analysis, and runbooks, collaborating with engineers to deliver practical, risk-informed solutions, with opportunities to shape security posture.

Qualifications

• Experience in at least one security area in a regulated environment.
• Knowledge of CI/CD, cloud services, and how a change moves from build to production.
• Ability to translate a security review or threat assessment into concrete changes.
• Clear writing and speaking with engineers and non-security colleagues.

Responsibilities

• Improve detection rules, alerts and logs for network and endpoint activity so coverage fits CFC's technology and the current threat picture, and stores the revised rules.
• Conduct incident response for complex cases, from investigation through containment and recovery, and files the incident report with the revised playbook.
• Conduct threat assessments, including attack-path reviews and threat hunts, and records the intelligence and the new requirements that come out of them.
• Analyse vulnerability and misconfiguration findings in software, application security tests, the build pipeline, malware defences, email and web protection, secure configuration and network infrastructure, and implements the control for each confirmed finding.
• Produce the security design review for projects and writes security and privacy checks into the definitions of ready and done.
• Improve conditional access, privileged access, device verification and joiner, mover and leaver processing, and records excessive permissions in the access review.
• Implement data protection controls for new sensitive stores, covering loss prevention, encryption, privacy requests, insider detection and disposal, and records the classification in the data inventory.
• Prepare evidence for control tests and audits, checks it against the asset inventory, and updates the monitoring rules where coverage is missing.
• Build workflow automation and analytics for repeated security tasks, and publishes the runbook.
• Coordinate incident exercises and tabletops against the continuity plan, and produces the awareness training CFC colleagues use.

Skills

Detection & Response

Identity & Access

Data Protection

Product Security

Control Assurance

CI/CD

Cloud Services

Threat Assessment

Threat Hunts

Job description

CFC Underwriting in London is seeking a Security Engineer to join the CISO team. You will implement and operate controls across detection and response, identity and access, and data protection, helping improve security across services and projects.

You will work on incident response, threat assessments, vulnerability analysis, and runbooks, collaborating with engineers to deliver practical, risk-informed solutions, with opportunities to shape security posture.