Senior Security Engineer - Threat Detection & Response

CFC; City Of London; On-site; GBP 90,000 - 120,000; Full time

Job summary

CFC is seeking a Senior Security Engineer in London to act as a hands-on security expert within the CISO function. You will guide incident response, design threat modelling, and implement security controls across detection, identity, data protection, and product security.

The role emphasises leading security governance, incident exercises, and continuous improvement across security operations in a fast-paced environment.

Qualifications

• Proven experience in a technical security role, including security operations, threat detection and response.
• Strong knowledge of CI/CD, cloud-native architecture, Infrastructure as Code and software supply-chain security.
• Experience leading threat modelling and resolving complex security and privacy design trade-offs.
• Ability to influence senior technical and non-technical stakeholders through evidence and pragmatic approach.

Responsibilities

• Diagnoses and refines detections, alerts and logs to meet business objectives and threat environments.
• Leads incident response operations and publishes incident reports with revised playbooks.
• Designs threat assessment services, threat profiling and modelling, and records attack paths and intelligence.
• Identifies vulnerabilities and misconfigurations, designs and implements preventive controls.
• Provides expert guidance on security design for systems and project readiness.
• Diagnoses identity lifecycle failures and implements preventive controls for access management.
• Implements data protection controls to prevent recurrence including encryption and DLP.
• Evaluates control findings against asset inventory and updates standards to prevent recurrence.
• Builds automation templates and runbooks for security tasks and trains teams.
• Leads incident exercises and tabletop simulations to improve continuity plans.
• Experience building and maturing security standards, workflows, and operational controls.

Skills

Security operations

Threat detection

Cloud security

Application security

Incident response

Threat modelling

Job description

CFC is seeking a Senior Security Engineer in London to act as a hands-on security expert within the CISO function. You will guide incident response, design threat modelling, and implement security controls across detection, identity, data protection, and product security.

The role emphasises leading security governance, incident exercises, and continuous improvement across security operations in a fast-paced environment.