Financialtimes33

Senior Cyber Security Engineer

London; Sofia. Posted 6 months ago

The role

This person will mature application and cloud security across an AWS-hosted technology estate. They will improve security guardrails, run threat-modelling sessions, and build automation to reduce toil.

What you will do

  • Improve application security guardrails
  • Tune and evolve SAST, software composition analysis, secret scanning and related controls
  • Improve cloud and IaC security guardrails
  • Drive vulnerability management
  • Drive cloud misconfiguration management
  • Run practical threat modelling
  • Build automation and tooling
  • Support secure architecture decisions
  • Partner with engineering teams
  • Support incidents and lessons learned

Required qualifications

  • Strong practical experience in application security and cloud security
  • Hands-on AWS security experience
  • Experience improving vulnerability management across engineering teams
  • Experience in improving cloud or IaC misconfiguration management at scale
  • Experience integrating, tuning or improving security tooling in CI/CD workflows
  • Experience running practical threat-modelling sessions
  • Ability to write scripts or small tools, ideally in Python
  • Strong communication and collaboration skills
  • Evidence of improving application security, cloud security or vulnerability management practices in a real engineering environment
  • Familiarity with Agile or Scrum ways of working

Nice to have

  • Experience with leveraging AI for AppSec and CloudSec
  • AWS Certified Security – Speciality or equivalent practical AWS security experience
  • Terraform or CloudFormation expertise
  • Incident-management or incident-response experience
  • Experience with Splunk or similar logging/SIEM platforms
  • Experience with security metrics, dashboards or reporting
  • Experience mentoring or line-managing security engineers

Benefits

  • Generous annual leave
  • Medical cover
  • Inclusive parental leave packages
  • Subsidised gym memberships
  • Opportunities to give back to the community

About the company

The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy. It has a warm, collaborative culture with a mission to deliver quality information and services worldwide.

Senior Cyber Security Engineer at Financialtimes33 | JobZoey