Senior Security Infrastructure Engineer

Metro Bank; London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

Metro Bank is seeking a cybersecurity professional to enhance their Operations Security team. Responsibilities include managing risks related to cybercrime, maintaining security infrastructure, and ensuring compliance with industry standards. The role offers competitive salary and flexible hybrid working arrangements.

Benefits

Competitive salary and discretionary bonus

Comprehensive benefits including healthcare

Training and internal career progression

Flexible hybrid working arrangements

Qualifications

• Understanding of cybersecurity risks and their impact.
• Experience in IT security and engineering.
• Familiarity with security best practices and compliance standards.

Responsibilities

• Enhance Operations Security team's capabilities in managing cybersecurity risks.
• Evaluate, build, test, and maintain cybersecurity infrastructure.
• Analyze and triage security events.

Skills

Understanding of cybersecurity risks

Experience in IT security infrastructure

Proven experience with cloud environments

Deep knowledge of network security

Strong understanding of application security

Job description

What you will do:

1. Enhance the capabilities of the Operations Security team in managing cybersecurity risks related to cybercrime and information security.
2. Evaluate, build, test, and maintain cybersecurity infrastructure throughout its lifecycle.
3. Analyze and triage security events, ensuring appropriate actions such as further investigations or flagging false positives for tuning.
4. Manage Infrastructure Security requests, problem and change tickets via support teams or Jira, including escalations from the business.
5. Responsible for the technical delivery, maintenance, and scalability of security infrastructure, including IDS/NBA, NAC, WAF, content filtering, DLP, and CASB systems.
6. Contribute to the development and maintenance of security policies, standards, procedures, and technical documentation, ensuring compliance.
7. Participate in compliance management with regulatory bodies, audits, IT risk assessments, and stakeholders.

We value responsibility, integrity, and courage to voice concerns, as risk management is integral to our banking operations.

What you will need:

1. Understanding of cybersecurity risks and their impact on stakeholders.
2. Experience in IT security infrastructure and engineering.
3. Proven experience with cloud environments such as Azure and/or AWS.
4. Deep knowledge of network protocols, network security, and systems like proxies, SASE, WAF, email security gateways, SSO, CASB, DLP, IDS, IPS, NAC.
5. Knowledge of the financial services industry and asset management (preferred).
6. Strong understanding of application security and related technologies.
7. Familiarity with OWASP Top 10, SANS Top 20, ISO27001/2, and security best practices.

Our promise to you:

• Competitive salary, discretionary bonus, and comprehensive benefits including holiday allowance, pension, healthcare, life assurance, and discounts.
• Training and internal career progression opportunities, with around 40% of roles filled internally.
• Flexible hybrid working arrangements to promote work-life balance.