Senior Security Engineer – Threat Detection & Response

CFC Underwriting; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

CFC Underwriting in London seeks a Senior Security Engineer to act as a hands-on problem-solver and SME in security and privacy domains. You will guide teams through complex issues and drive continuous improvement of security governance, management and operations.

This lead individual contributor role focuses on implementing and verifying automated controls across detection, identity, data protection, product security, and control assurance.

Qualifications

• Proven experience in technical security roles including security operations, threat detection and response.
• Strong knowledge of CI/CD, cloud-native architecture, IaC and software supply-chain security.
• Experience leading threat modelling and resolving complex security and privacy design trade-offs.
• Ability to assess and deploy emerging data protection, AI and agentic engineering practices pragmatically.
• Ability to influence senior technical and non-technical stakeholders with evidence and credibility.

Responsibilities

• Diagnoses and refines detections, alerts and security logs across network and endpoint monitoring.
• Leads incident response operations and publishes incident reports with revised playbooks.
• Designs and operates threat assessment services, models threats and records intelligence.
• Diagnoses vulnerabilities and misconfigurations and designs controls to prevent recurrence.
• Produces expert security design guidance and leads security aspects of project readiness.

Skills

Security operations

Threat detection

Cloud security

CI/CD

Infrastructure as Code

Threat modelling

Data protection

Stakeholder influence

Runbooks and automation

Job description

CFC Underwriting in London seeks a Senior Security Engineer to act as a hands-on problem-solver and SME in security and privacy domains. You will guide teams through complex issues and drive continuous improvement of security governance, management and operations.

This lead individual contributor role focuses on implementing and verifying automated controls across detection, identity, data protection, product security, and control assurance.