Senior Security Engineer

AWE; City Of London; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

AWE seeks an experienced Senior Security Engineer to support a digital transformation within the Cyber Security Team. This role involves leading security initiatives, providing expertise, and ensuring best practices in security are integrated throughout delivery teams. Candidates should possess strong technical skills, relevant cybersecurity certifications, and effective communication abilities.

Qualifications

• Proven experience in a similar role within a mid/large sized organisation.
• Strong technical skills with multiple security domain certifications.
• Expertise in integrating security tools into development pipelines.

Responsibilities

• Lead the installation and commissioning of security controls.
• Provide security engineering support to projects.
• Organise penetration testing and manage remediation efforts.

Skills

Cyber security engineering

Strong technical skills

Analytical skills

Problem-solving

Communication

Education

CISSP

CISM

CSSP

Tools

SAST

DAST

SCA

Job description

Job Title: Senior Security Engineer Manager: CISO
Department: Cyber Security Division: Enterprise Information Technology Services
Location: London, Hybrid

Main Purpose:

The MDU is undertaking an exciting digital transformation programme and to support this the Cyber Security Team is looking to appoint a Senior Security Engineer. Working closely with delivery teams covering strategic and non-strategic change this role will provide subject matter expertise to keep the MDU, its data and, its member safe from cyber security threats.

The Senior Security Engineer will be responsible for the delivery of security technologies in a range of projects and will therefore:
• Have a strong cyber security engineering or professional services background with experience of delivering both large-scale and small-scale projects to a high quality in a fast-paced environment.
• Have a good practical knowledge of both traditional security technologies and modern security tooling to allow support of both the existing and new environments during the digital transformation.
• Have a proven track record of working in cross functional teams to successfully deliver business change and cyber transformation projects.
• Be able to present complex or highly technical issues in simple and easy to understand formats.

Main Responsibilities:

• Lead the installation andcommissioning of infrastructure, tooling, and controls within Cyber Security Team led initiatives.
• Provide subject matter expertise in all areas of Cyber Security, including but not limited to: o Security Architecture o Application Security o Cloud Security o Cryptography
• Provide security engineering support to wider teams ensuring controls and assurance are delivered as part of projects and initiatives.
• Work with suppliers and vendors to coordinate contract security engineers, ensuring projects are appropriately resourced and deliverables are provided to a high standard.
• Organise penetration testing, managing the necessary remedial work and communicating go-live risks.
• Contribute to the development of the security architecture, the SDLC, and application security testing standards.
• Support the Cyber Operations Teams as a point of escalation in the event of Major Incidents, Disaster Recover or Business Continuity scenarios.
• Work with development teams to ensure applications are delivered having followed best practice security testing as part of the SDLC.
• Assist the CISO, as required, in the wider delivery of Cyber Security.

Skills and Experience:

• Proven experience in a similar role within a mid/large sized organisation, preferably in a regulated industry such as Financial Services or Insurance sectors.
• Strong technical skills with experience and accreditations covering multiple security domains.
• Cyber security subject matter expert with relevant certifications such as CISSP, CISM, CSSP, or equivalent.
• Proficiency in SAST, DAST and SCA with hands on experience integrating such tools into development pipelines.
• Extensive experience of consulting on projects, building in security requirements and ensuring services go-live with minimal security risk.
• Strong analytical and problem-solving skills with a strategic mindset and attention to detail.
• Excellent written and verbal communication skills, with the ability to articulate complex concepts to non-technical stakeholders.

Personal Qualities:

• A strong collaborator, excellent relationship building and communication skills with the ability to engage people from diverse cultures and different levels.
• Able to adapt and respond to the changing cyber landscape, and corporate objectives.
• Able to work on own initiative while also working with project teams to tight timescales.

You may have experience in the following: Information Security Manager, Cyber Security Engineer, Security Architect, Security Consultant, IT Security Specialist, Cyber Risk Manager, Security Operations Manager, Information Assurance Manager, Security Project Manager, Cyber Defence Manager, etc.

REF-222 266