Security Engineering Manager

Pacific Life; City Of London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

25 days annual leave

Private medical insurance

Group Life Insurance

Wellbeing program

Job summary

Pacific Life Re is seeking a Security Engineering Manager to lead security engineering initiatives across platforms, applications and cloud services. You will drive secure-by-design designs, run vulnerability programs, and operationalise AI-enabled security capabilities as products with roadmaps and measurable outcomes.

The role collaborates with IT, Risk and Privacy teams, and requires hands-on security tooling, risk assessments and governance in a fast-paced environment.

Qualifications

• 7+ years of experience in cybersecurity roles across multiple domains.
• Experience applying AI/ML or LLMs to security use cases with outcomes.
• Product ownership or capability ownership in a product-delivery model, backlog and roadmap management.

Responsibilities

• Lead and support security projects across the organisation.
• Review, maintain and configure security tooling; drive secure-by-design practices.
• Conduct vulnerability assessments and coordinate remediation.
• Work with risk, privacy, data governance and compliance teams.

Skills

Security engineering

Product ownership

AI in security

Cloud security

Threat modelling

Scripting / low-code

Governance & risk

Education

Bachelor's degree in IT or related field

Tools

SIEM

EDR

Cloud security services

Vulnerability management tools

Job description

Job TitleSecurity Engineering ManagerJob DescriptionRole OverviewAs a Security Engineering Manager, you will play a critical role in executing security initiatives that protect our systems, data, and infrastructure. We’re looking for a seasoned generalist—someone who has touched most areas of cybersecurity and can adapt quickly to new challenges. You’ll work closely with IT, engineering, and risk teams to implement and maintain security controls, evaluate new designs, and drive continuous improvement across our security posture. You will also lead the practical application of artificial intelligence (AI) to security use cases, working in a product delivery model where security capabilities are treated as products with clear owners, roadmaps, user outcomes and measurable value, delivered iteratively through agile, multi-disciplinary squads.Role ResponsibilitiesSecurity Engineering & Consulting:Lead and support the implementation of security projectsAbility to review, maintain and configure security tooling throughout the organisationEvaluate and enhance existing security controls, policies, and procedures.Perform risk assessments and recommend mitigation strategies, whilst informing technology and business owners to communicate current Resilience and risk exposure.Provide Technical Security consultancy to projectsEngage effectively with risk, legal, privacy, data governance and enterprise architectureProvide support and guidance through secure by design competencies (Attack mapping, threat modelling)Conduct vulnerability assessments and coordinate remediation efforts.Collaborate with DevOps and IT teams to integrate security into infrastructure and application design and development lifecycles.Support compliance efforts (e.g., SOC 2, ISO 27001, etc.) through documentation and control testing.Knowledge sharing with team members and promote a culture of security awarenessAI-Enabled Security Capabilities (Product Delivery Model):Identify, prioritise and deliver artificial intelligence (AI) and machine learning use cases that measurably improve security outcomes – for example vulnerability prioritisation, control assurance and evidence gathering.Own AI-enabled security capabilities as products rather than projects: define the problem statement and user need, maintain a prioritised backlog and roadmap, and deliver iteratively through discovery, proof of value, pilot and scaled adoption.Apply security automation and orchestration, including large language model (LLM) and agent-based approaches, to reduce manual effort in security engineering workflows, with appropriate human oversight of automated decisions.Work with data, platform and engineering teams to ensure the data quality, pipelines, integration and tooling needed to support AI-enabled security capabilities at scale.Ensure AI use in security is safe, explainable and compliant – working with risk, privacy, data governance and compliance teams to meet internal AI governance standards and applicable regulatory expectations across our operating jurisdictions.Advise on securing the organisation’s own AI adoption, including model and prompt security, data leakage, third-party AI services and AI-specific threats (for example prompt injection, model misuse and adversarial inputs).Skills & Experience7+ years of experience in cybersecurity roles, preferably in finance services or insurance sectors.Broad knowledge of security domains: network security, endpoint protection, Secure development lifecycle, identity and access management, cloud security (AWS/Azure), incident response, and governance.Hands-on experience with SIEM, EDR, vulnerability management tools, and cloud-native security services.Demonstrable experience applying artificial intelligence (AI), machine learning or large language models (LLMs) to security use cases, with evidence of delivered outcomes rather than experimentation alone.Experience working in a product delivery model – product ownership or capability ownership, backlog and roadmap management, agile delivery, iterative release and value measurement.Practical knowledge of security automation and orchestration, scripting or low-code integration, and working with application programming interfaces (APIs) and security data pipelines.Understanding of AI risk, governance and assurance concepts, including model limitations, bias, explainability, data protection and emerging AI regulation and standards (for example the EU AI Act and ISO/IEC 42001).Awareness of AI-specific threats and controls, such as prompt injection, data leakage through AI tooling, model and supply chain risk, and frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS.Familiarity with regulatory frameworks and industry standards (e.g., NIST, CIS, etc.).Strong analytical and problem-solving skills.Excellent communication and collaboration abilities.Prefer certifications such as GIAC, CISSP, etc.Prefer Bachelor’s degree in Information Technology or related disciplineCompetencies and Behaviours:Pragmatic approach – creative problem solving for mitigations and improvements to cater for a variety of technology and business needsPositive strategic thinking – Sharing insight and best practice approached to challenges.Variable communication style – Have the ability to communicate at to both technical and executive audiences.Growth mindset – Continuous investment in skills and knowledge.Product and outcome mindset – Starts from the user and the outcome, delivers in small increments, measures value and adapts quickly.Balanced innovator – Enthusiastic about new technology such as AI, while remaining objective about hype, limitations and risk.Positive collaborator – Approachable and supportive to solving challenges across multiple stakeholders and teams.Working For Pacific Life ReEvery person in our global team is valued for the unique qualities they bring to our business and we seek to build their expertise and support their individual ambitions at every step. Of course, we take our work seriously and we know our team can operate under great pressure. We work hard and thrive on achievement, but we also know how to have fun and relax too. We regularly host a range of team building days to strengthen our team's connection with each other and reflect on their successes.Providing employees with a healthy work-life balance is very important to our culture. We have a wide range of employee benefits and we host regular social activities and well being initiatives. We are also committed to supporting our employee's involvement in their communities, by actively fundraising, hosting charity events and overseeing volunteering opportunities.Benefits (Only for Permanent and Fixed Term Employees)Leave25 days of annual leave with option to buy/sell more daysAdoption and fertility leaveGenerous enhanced parental leaveHealthcareComprehensive private insurance coverage for employee and dependentsGroup Life Insurance coverage of 9x basic annual salary and Group Income Protection up to 75% of basic annual salaryOptical benefitsSavings & Retirement15% combined employee/employer contributionsWellnessSubsidized gym membershipAccess to Employee Assistance ProgramCycle to Work and Electric Car Salary Sacrifice SchemeTime off for volunteeringCharitable matching of employee donationsYou Can Be Who You AreWe are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential.As part of our commitment to diversity and inclusion, we will provide reasonable adjustments during the recruitment process to ensure equal access to applicants with disabilities. Please contact us about your needs so that we can discuss these with you to make sure that suitable adjustments are made, where possible.Pacific Life Re ValuesPlease click here to view our company values