Senior Application Security Engineer – AI, EASM & FinServ

McCabe & Barton; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

McCabe & Barton seeks a Cyber Security Engineer in London to strengthen security controls across critical business platforms and infrastructure in a fast-paced, highly regulated private equity setting.

You will drive triage governance, implement FIDO2/WebAuthn, perform third-party reviews, and enhance monitoring with SIEM/UEBA while supporting vulnerability patching and micro-segmentation efforts.

Qualifications

• Experience in Security Operations, Threat Analysis or Cyber Security Analysis.
• Experience in financial services, private equity, or a regulated environment.
• Hands-on with SIEM, UEBA, EDR and identity management technologies including Entra ID and Conditional Access.

Responsibilities

• Drive triage and remediation governance for AI-assisted code audit of proprietary products.
• Support rollout of FIDO2/WebAuthn across privileged accounts and Entra admin roles.
• Assist with third-party trust boundary reviews.
• Maintain and enhance the emergency patching runbook for critical vulnerabilities (CVSS 9.0+).
• Contribute to micro-segmentation of proprietary apps from M365 workloads, including honeytoken deployment for early-warning threat detection.
• Run continuous External Attack Surface Management (EASM) across the firm's external footprint and cross-reference findings weekly with the CMDB.
• Support SIEM and UEBA enhancements, building detection logic around deal workflow baselines.

Skills

SIEM

UEBA

EDR

Entra ID

Conditional Access

FIDO2/WebAuthn

App security vulnerabilities

SBOMs

Tools

Entra Admin Console

Job description

McCabe & Barton seeks a Cyber Security Engineer in London to strengthen security controls across critical business platforms and infrastructure in a fast-paced, highly regulated private equity setting.

You will drive triage governance, implement FIDO2/WebAuthn, perform third-party reviews, and enhance monitoring with SIEM/UEBA while supporting vulnerability patching and micro-segmentation efforts.