Senior Security Engineer: Observability, Automation & Risk

CFC; City Of London; On-site; GBP 120,000 - 180,000; Full time

Job summary

CFC is seeking a Staff Security Engineer to advance security observability, automate controls and strengthen governance across its global tech estate. This senior individual contributor role partners with engineering, data, AI and digital workplace teams to raise security maturity in a fast-moving environment.

You will design scalable security observability, automate assurance and embed secure practices into products and platforms while driving measurable risk reduction and security outcomes at

Qualifications

• Strong background in security engineering, governance, risk or compliance.
• Experience building automated security controls in modern cloud environments.
• Knowledge of SIEM, vulnerability management, data protection and exposure management tools.
• Experience with APIs, automation, scripting and infrastructure-as-code.
• Familiarity with Azure, AWS or GCP and security frameworks (ISO 27001, SOC 2, CIS).
• Experience in regulated environments and cross‑functional security collaboration.

Responsibilities

• Designing security observability capabilities across systems, infra and apps.
• Developing automated control monitoring and continuous testing solutions.
• Embedding security controls into products, platforms and processes.
• Improving security event monitoring, exposure management and alerting.
• Conducting security reviews of new initiatives and technologies.
• Creating meaningful security metrics and actionable reports.

Skills

Security engineering

Governance & risk

Cloud security

Automation & scripting

APIs & IaC

Security frameworks

Communication & stakeholder influence

Tools

SIEM

Vulnerability management

Data protection

Endpoint security

Job description

CFC is seeking a Staff Security Engineer to advance security observability, automate controls and strengthen governance across its global tech estate. This senior individual contributor role partners with engineering, data, AI and digital workplace teams to raise security maturity in a fast-moving environment.

You will design scalable security observability, automate assurance and embed secure practices into products and platforms while driving measurable risk reduction and security outcomes at