My Fintech client based in London is looking for a Security Engineer to join the team on an initial 6 month contract. Below are some key details -
We are currently looking for a Security Engineer to join the team based in London.
The successful candidate will work closely with the head of security to define and
develop the necessary tools and processes to improve our security posture.
This role will grant exposure to information security management, offensive security and
defensive security in an agile environment, and will require extensive collaboration with
the all the different teams, including development, platform, risk, and
architecture. As part of the duties, the engineer will be required to produce
documentation on all the different security practices.
This is an exciting role to become a key member of a growing security team. Working in
a digital-only environment will require the engineer to adhere to agile practices and
ensure that we are at the forefront of modern security. We believe the best
software engineering is done in an agile, iterative way, and we believe that the best
security practices follow the same pattern.
Responsibilities
- Work with multiple stakeholders, in both engineering and business capabilities, to
understand implementation and process decisions and help improve them.
- Evangelize the security posture. Security is not a silo for us, it’s embedded in
everything we do.
- Work with security tooling and be able to develop more tools as we grow.
- Promote and implement new security initiatives.
- Document applications, data and technology architecture using Confluence, draw.io
and UML (if necessary).
- Document all of our security practises and systems, ranging from business-level
security down to technology-level security (e.g. TLS certificate management etc).
- Feedback and present documentation to key stakeholders within the wider business.
Since it’s a small team a passion and desire to broaden your knowledge is a must, having
the opportunity to work with:
- Mobile application security, REST APIs and websites.
- Code scanning, dependency scanning and vulnerability management in
heterogeneous environments.
- Network and platform security including Kubernetes, Docker, Kafka and AWS
Knowledge and Experience
Skills:
- A clear communicator to both technical and non-technical audiences
- Skill with at least one scripting language and one development language
- High attention to detail
Experience:
- Experience working in a fast-paced highly collaborative environment
- Experience both breaking and building heterogeneous environments
- Experience with application, platform or business security practices
- Wide exposure to a variety of different code management, build and deployment
- tools, such as JIRA, BitBucket Enterprise, Git, NPM, Webpack, TeamCity,
- Artifactory