Security Engineer - Financial Services

Job Description

leading investment firm is seeking a Senior Cyber Security Engineer to join their London-based team. The successful candidate will play a pivotal role in maintaining and enhancing the security of their information assets. This role requires a strong technical and practical understanding of information security topics and techniques. The Senior Cyber Security Engineer will collaborate with various teams and stakeholders across the business, providing high-quality security guidance.

• Responsibilities: Responsible for the technical design, implementation, and maintenance of their technical security infrastructure.
• Develop and enforce security policies, standards, and guidelines to mitigate risks and ensure compliance with security best practices.
• Conduct regular risk assessments to identify potential security threats and vulnerabilities.
• Contribute to awareness and training programs to educate stakeholders on security best practices and policies.
• Requirements and Skills: Formal qualifications or certification in enterprise-level security solution concepts and advanced working expertise.
• Skilled in planning, designing, and implementing enterprise-level security solutions.
• Experience working on one or more Public Cloud platforms like AWS, Google Cloud, or Azure.
• Advanced proficiency in one or more programming/scripting languages (e.g., Python, PowerShell).
• Proficient in all aspects of the software development lifecycle.
• In-depth knowledge of IT security principles, practices, and technologies.
• Excellent analytical and problem-solving skills.
• Highly self-motivated with a demonstrated passion for Cyber Security.
• Experience in threat hunting and a solid working knowledge of security strategies.
• Background in security architecture and developing and designing security controls in a cloud environment is advantageous.
• Experience using a variety of analytical tools and methods to identify security compromises within large and sophisticated data sets.
• Understanding of techniques and tools to perform forensics and root cause analysis.
• Ability to communicate technical issues to non-technical audiences and explain the impact of vulnerabilities or threats in business-focused language.
• Industry certifications (e.g., CompTIA, CEH) are advantageous.