Staff Security Engineer: Cloud Security & Observability

CFC; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

CFC in London is seeking a Staff Security Engineer to advance security capabilities across our global technology estate. You will design security observability, automate control assurance and embed strong controls into products, platforms and processes.

This senior individual contributor role requires deep security expertise, cross‑team collaboration and a proven ability to translate security data into actionable insight and measurable risk reduction.

Qualifications

• Experience in security engineering, governance, risk or compliance.
• Proven ability to build automated security solutions in modern cloud environments.
• Familiarity with SIEM, vulnerability management, data protection, and endpoint security.

Responsibilities

• Designing and building security observability across systems, infrastructure and applications.
• Developing automated control monitoring, evidence collection and continuous testing solutions.
• Partnering with engineering, data and technology teams to embed security controls into products and platforms.
• Driving improvements in security event monitoring, exposure management and alerting capabilities.
• Conducting security reviews of new products and technology initiatives.
• Building meaningful security metrics and reporting to support decision-making.
• Evolving security policies and guardrails through automation and measurable outcomes.
• Contributing to access governance and control assurance across identities.

Skills

Security engineering

Cloud security

SIEM

Automation

APIs

IaC

Cloud platforms (Azure/AWS/GCP)

Security standards (ISO 27001/SOC 2/CI

Regulated environments

Communication

Job description

CFC in London is seeking a Staff Security Engineer to advance security capabilities across our global technology estate. You will design security observability, automate control assurance and embed strong controls into products, platforms and processes.

This senior individual contributor role requires deep security expertise, cross‑team collaboration and a proven ability to translate security data into actionable insight and measurable risk reduction.