Security Engineer

## Job Title Security Engineer## DepartmentTSD Information Security-BG-UK## Overview of Department## Purpose of Role As a Security Engineer at Baillie Gifford, you will be a key member of the Security Engineering team, responsible for building, integrating and maintaining the security capabilities that protect our systems, data and people.
Security Engineering bridges security and technology, creating secure-by-default platforms and controls that enable teams across the organisation to operate securely while continuing to move quickly. The team works closely with Infrastructure, Cloud, Development, Dev Ops and other security teams to embed security earlier in the technology lifecycle and reduce reliance on manual security processes.
In this role, you will take a hands-on approach to engineering and improving security capabilities across cloud, identity, endpoint, vulnerability management and the wider security technology estate. You will develop integrations, tooling and automation that improve security outcomes while simplifying how security is consumed by other teams.
You will help mature and optimise existing security investments rather than simply introducing new technology, ensuring our platforms are effectively integrated and aligned with business risk. The role offers opportunities to broaden your experience, working across areas such as security architecture, threat modelling, development, continuous control validation and emerging technologies including AI.## Responsibilities
* Design, build, configure and maintain security platforms and protective controls across our technology environment, including XDR, SIEM, SOAR, cloud security and vulnerability management capabilities.
* Develop security tooling, integrations and automation using APIs, scripting, SOAR and other engineering approaches, turning repetitive or manual processes into scalable and self-service capabilities where appropriate.
* Support and improve identity security, privileged access and secrets management capabilities, including their integration across infrastructure and applications.
* Support the firm to adopt AI securely by understanding emerging risks, contributing to practical guardrails and exploring ways AI can improve how we build, automate and deliver security.
Work closely with Core Platform teams to embed security earlier in project and development life cycles, developing secure-by-default patterns, guardrails and security controls that can be adopted consistently.
* Support and improve our cloud security posture and the integration of security testing and controls into CI/CD and development workflows.
* Contribute to security architecture, technical design reviews and threat modelling, providing practical security guidance that helps technology teams understand risk and implement proportionate solutions.
* Develop and maintain security orchestration, platform integrations and data flows that support security operations and incident response. Provide specialist engineering support during incidents where required.
* Test and continuously validate security controls through configuration testing, attack simulation and Threat Informed Defence, using the results to improve preventative and detective controls.
* Produce and maintain clear technical documentation for security platforms, integrations, architecture and engineered solutions.
Continually develop your expertise across security engineering, cloud, identity, application security and other emerging technologies, sharing knowledge and new approaches with the wider team.
##
** What success looks like*
* * You build a strong understanding of our environment and use it to make proportionate, risk-based engineering decisions.
* Security solutions are reliable, maintainable and effective for the teams that use them.
* Manual effort and unnecessary complexity are reduced through effective automation and simplification.
* Technology teams receive clear, practical security engineering advice that helps them understand and manage risk.
* Our existing security capabilities continue to mature as you broaden your knowledge across different security domains.  ##
** Your knowledge and experience*
* * You will have practical experience working within Cybersecurity, Infrastructure, Cloud Engineering, Identity & Access Management, Dev Ops, or a closely related technical discipline.  You will bring strong knowledge and practical engineering experience across several of the following areas, with solid technical…