Senior Security Engineer

Morgan McKinley; London; Hybrid; GBP 110,000 - 120,000; Full time

Job description

About the job

Senior Security Engineer

London/ Hybrid

£110,000 - £120,000 + Package

We are currently partnered with a global Financial Services client who is undergoing a group-wide expansion programme. The CIO has identified the need to grow their CISO operations across the UK and Ireland.

The client is looking for a Senior Security Engineer who will work closely with the CISO function in the UK. You will work with the wider team to deliver solutions and maintenance to the group estate. You will interact with the IT Security Architecture Team, IT Security Operations Team, Project Management Teams, global IT Teams, and outsourcing partners to deliver solutions that enhance the security program.

Responsibilities

1. As part of the Security Engineering team, develop and implement security strategy in consultation with the IT teams, ensuring that all initiatives are mirrored in respective strategies including the overall Strategy.
2. Provide security advice and support for information technology projects.
3. Research new security-related products and services.
4. Facilitate definition, monitoring and enforcement of secure configurations for on-premise infrastructure and applications and cloud-based environments, such as SaaS, IaaS, and PaaS.
5. Operate and maintain Security controls related to configuration compliance.
6. Review and help refine Security procedures to ensure compliance with cyber resilience requirements.
7. Design and integrate consistent security solutions across on-premises and cloud environments.
8. Oversee design principles and controls relating to third-party solution providers.

Required Knowledge and Skills

1. Knowledge of firewalls, switches, routers, application servers, web servers, databases, operating systems, and good knowledge of enterprise security concepts/frameworks and products, secure design principles and patterns.
2. Security Certifications such as CISSP, SANS GIAC GSEC, GCED, GCIA, GCIH, GREM; or Cisco CCNA, CCNP; or equivalent.
3. Industry recognized cloud security qualifications (e.g. CCSK, CCSP, AWS Security Fundamentals, AWS Certified Security).
4. Working knowledge of frameworks and regulations: ISO 27001/2, SANS Top 20 Critical Security Controls, NIST CSF, and FFIEC handbook.

Excellent package on offer.

Hybrid, 2 days onsite/ City of London.

Ideally from a Financial Services background/ regulated markets.