Staff Security Engineer - Observability & Automation Leader

CFC; England; On-site; GBP 90,000 - 120,000; Full time

Job summary

CFC is seeking a Staff Security Engineer to evolve security capabilities and drive measurable risk reduction across its global technology estate. This senior individual contributor role requires solving complex security challenges at scale and collaborating with engineering, data, AI and digital workplace teams.

You will build security observability, automate control assurance, and embed security into products, platforms and processes, while mentoring stakeholders and raising security maturity

Qualifications

• Senior security engineering role requiring depth in information security, governance, risk or compliance.
• Experience building automated security controls and solutions in modern cloud environments.
• Knowledge of SIEM, vulnerability management, data protection, and exposure management platforms.
• Familiarity with APIs, automation, scripting and infrastructure-as-code.
• Experience with Azure, AWS or GCP cloud platforms.
• Understanding of ISO 27001, SOC 2 and CIS Controls.

Responsibilities

• Designing and building security observability capabilities across systems, infrastructure and applications.
• Developing automated control monitoring, evidence collection and continuous testing solutions.
• Partnering with engineering, data and technology teams to embed security controls into products and platforms.
• Improving security event monitoring, exposure management and alerting capabilities.
• Conducting security reviews of new products, services and technology initiatives.
• Building security metrics and reporting to support decision-making.
• Evolving security policies, standards and guardrails through automation and measurable outcomes.
• Contributing to access governance and security control assurance for human and non-human identities.
• Acting as a technical leader and trusted security advisor across the technology organisation.

Skills

Security engineering

Governance & risk

Cloud security

Automation & scripting

Infra-as-code

APIs

ISO 27001

SOC 2

CIS Controls

SIEM

Vulnerability management

Data protection

Endpoint security

Exposure management

Communication skills

Stakeholder influence

Education

Bachelor’s degree in a relevant field

Tools

SIEM platforms

Vulnerability scanners

Data protection tools

Endpoint security tools

Automation tools

IaC tools

Job description

CFC is seeking a Staff Security Engineer to evolve security capabilities and drive measurable risk reduction across its global technology estate. This senior individual contributor role requires solving complex security challenges at scale and collaborating with engineering, data, AI and digital workplace teams.

You will build security observability, automate control assurance, and embed security into products, platforms and processes, while mentoring stakeholders and raising security maturity