Principal Security Engineer

Job Details

• Promote a culture where we re-use more which allows us to optimise workflow efficiency and reduce duplication.
• Guide and coach teams on good security engineering practices and process improvements, helping to build capability and maturity across the organisation.
• Supports the team in delivering outcomes efficiently, by reducing manual execution.
• Ensure fast, reliable feedback loops are in place to enable fail-fast delivery and continuous improvement.
• Define and implement best practices and controls, ensuring adherence and enabling early detection of issues.
• Drive engagement and collaboration across Scrum Teams and the CIO community, leading the definition and adoption of best practices to enable faster, secure and more reliable delivery.

• Extensive practical experience in IT Security working in an agile environment.
• Transformational leadership skills being able to influence decision making and implement new processes and procedures in support of the company’s vision.
• Excellent mentoring skills to support direct reports in their ongoing development.
• Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services.
• In‑depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles.
• Excellent problem‑solving skills and the ability to analyse complex security issues and develop effective solutions.
• Strong communication and collaboration skills, with the ability to work effectively in cross‑functional teams.
• Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure.
• Strong proficiency in leveraging data and advanced analytics to drive decision‑making and continuously enhance security solutions.

• Proficient knowledge of at least on agile methodology (eg Scrum, Kanban, SAFe) Familiar with backlog and test case management in a system of record such as Jira or Octane.
• Expert knowledge using Cloud Technologies.
• Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements.
• Hands‑on experience with Azure Kubernetes Service (AKS) and microservices architecture.
• Familiarity with Dev Sec Ops  methodologies and tools, enabling the seamless integration of security into the development process.
• Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms.
• In‑depth understanding of the Microsoft ecosystem, including hands‑on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL.
• Expertise in utilizing Azure Dev Ops to drive efficient and collaborative development processes, including the development of security solutions and updates in code.

Unfortunately, we are unable to progress with candidates that require sponsorship at this time.

Attractive salary based on experience + car allowance (pay reviews also completed each year)

We champion a flexible and hybrid working approach so please speak to your recruiter to discuss in more detail, including days in the office and at home.

All colleagues are eligible for our annual 4

Cs performance bonus, which is usually paid in March. The scheme is based on Hastings’ performance against our business goals and your own personal performance.

As a Band 4 colleague, Hastings pay for you to receive private medical Insurance (also known as PMI). This gives you flexibility and convenience to see a specialist or consultant and allows you to decide when and where you will be seen.

As well as providing you with 4x your salary with our life assurance cover and income protection at no extra cost, pension contribution match up to 10%, we are proud to provide you with an AWARD WINNING package which includes – discounts and cashback at everyday retailers and on our own products, fee free independent mortgage advice, and free access to financial…