Senior Engineer, Cybersecurity

Blis; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Blis is seeking a hands-on cloud security engineer within the DevSecOps team to protect our Google Cloud and AWS estate. You will own security tooling, threat modeling, and security automation across our data pipelines and customer-facing apps.

You will collaborate with engineering and product teams to embed secure practices, drive risk-based decisions, and improve detection, response, and compliance with regulatory requirements. This role is IC but sits within a strong security organization.

Qualifications

• Bachelor's degree with 5+ years of relevant experience in cybersecurity engineering or a related field.
• Experience building and operating secure cloud platforms (GCP, AWS) and CI/CD pipelines.
• Strong hands-on security engineering background with risk-based approaches and collaboration across teams.

Responsibilities

• Develops and implements advanced security strategies, tools, and technologies to protect against cyber threats and vulnerabilities.
• Identifies proactively security risks and deploys effective mitigation measures to safeguard systems and data.
• Collaborates with IT and business teams to align cybersecurity measures with regulatory requirements.
• Enhances resilience to cyber incidents through expert practices and security programs.
• Maintains integrity of cybersecurity infrastructure by monitoring and upgrading controls.
• Conducts security assessments and audits to ensure compliance with internal and external standards.
• Participates in other duties or projects as assigned by management.

Skills

Cybersecurity

AI

Security Engineering

Security Automation

Security Incident Management

Threat Modeling

Security Testing

Escalation Management

Stakeholder Management

Security Technologies

Education

Bachelor's Degree in Computer Science or Information Technology

Advanced degree in a related field

Job description

Blis is an award-winning global leader and technology innovator in big data analytics and advertising. We help brands such as McDonald's, Samsung and Mercedes-Benz understand and reach their best audiences. We're industry champions for the ethical use of data, and we believe people should have control over their data and privacy. With offices across four continents and over 300 people, we're a truly international company with a global culture and scale — and as part of T-Mobile Advertising Solutions, we now pair that with the reach and resources of a major global group.

This role protects Blis's cloud platform and the data it processes, through the most significant change in the company's technical history. It's a hands-on cloud security engineering role with a strong automation bias: a small team covers a large estate, and that works because the routine work is automated. You'll have real autonomy over how security is delivered on the Blis estate, with a substantial parent security organisation to plug into rather than a blank page to fill. Our platform runs mainly on Google Cloud Platform, with some AWS. It includes customer-facing web applications, public APIs serving server-to-server traffic from partner systems, and data pipelines processing many terabytes daily, all delivered through a comprehensive CI/CD pipeline. You'll sit in our DevSecOps team and work across the full product lifecycle, so that security is built in from the start. Success looks like a measurably stronger security posture, faster detection and response, a clean and well-documented integration into T-Mobile, and decisions made with data in close partnership with engineering and the wider business.

Job Summary

This role is essential for protecting digital assets and maintaining the integrity of cybersecurity infrastructure within the organization. It involves developing and implementing security strategies, tools, and technologies to defend against cyber threats and vulnerabilities. The role is distinguished by its focus on proactive risk identification and deployment of mitigation measures to safeguard systems and data. Success is measured by the effectiveness of security improvements and alignment with organizational goals and regulatory requirements. The work enhances organizational resilience to cyber incidents and supports overall security posture for internal and external stakeholders.

MAIN RESPONSIBILITIES (Approximate Percent Of Time)

• Develops and implements advanced security strategies, tools, and technologies to protect against cyber threats and vulnerabilities (25%)
• Identifies proactively security risks and deploys effective mitigation measures to safeguard the company's systems and data (20%)
• Collaborates with various IT and business teams to align cybersecurity measures with organizational goals and regulatory requirements (15%)
• Enhances the company's resilience to cyber incidents through expertise and dedicated cybersecurity practices (15%)
• Maintains the integrity of cybersecurity infrastructure by monitoring and upgrading security systems as needed (10%)
• Conducts regular security assessments and audits to ensure compliance with internal and external standards (5%)
• Participates in other duties or projects as assigned by business management as needed (10%)

Qualifications

Required Minimum Qualifications

• Education: Bachelor's Degree plus 5 years of related work experience OR Advanced degree with 3 years of related experience (Required)
• Acceptable areas of study include Computer Science or Information Technology (Required)

Additional Qualifications: Experience (all Preferred)

• 4-7 years: Experience with security related software and/or business process design
• 4-7 years: Experience in technical project management and leading cross-functional solution design teams
• 4-7 years: Expertise in network information security, including Firewall policy design, SSL Certificate management, and vulnerability analysis mitigation

Skills (all Required)

• Artificial Intelligence (AI)
• Cybersecurity
• Escalation Management
• Security Automation
• Security Engineering
• Security Incident Management
• Security Technologies
• Security Testing
• Stakeholder Management
• Threat Modeling

Licenses And Certifications (all Preferred)

• CISSP: An advanced-level certification for IT pros serious about careers in information security. Offered by (ISC)², CISSP is designed to prove expertise in designing, implementing, and managing a best-in-class cybersecurity program.
• CISM: Offered by ISACA, this certification is for management-focused IT professionals who are responsible for developing, managing, and overseeing information security systems in enterprise-level applications, or for developing best organizational security practices.
• CRISC: Also provided by ISACA, CRISC is aimed at IT professionals, project managers, and others whose job it is to identify and manage risks to IT and the business.

Job Family: Cybersecurity Engineering Management Level: Individual Contributor - IC