Security Engineer

Overview

Job Description Purpose of the role:
To develop, implement and maintain solutions that support the safeguarding of the bank's systems and sensitive information.

Accountabilities:
Provision of subject matter expertise on security systems and engineering patterns;
Development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems;
Management and protection of secrets, ensuring that they are securely generated, stored, and used;
Execution of audits to monitor, identify and assess vulnerabilities in the bank's infrastructure/software and support the response to potential security breaches;
Identification of advancements to support the innovation and adoption of new cryptographic technologies and techniques;
Collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements;
Development, implementation and maintenance of Identity and Access Management solutions and systems.

As a Security Engineer, you will be responsible for designing, implementing, and supporting data protection technologies, ensuring effective security controls are in place to mitigate risk while enabling business productivity.

• Strong foundational knowledge of at least one core security domain (VM, Endpoint, Data Security, etc.)
• Strong foundation knowledge in cloud technologies at least in one CSP (AWS or Azure) and hybrid such as Openshift
• Strong knowledge of security network architectures such as Firewalls, DMZ, proxies, DNS, web and mail servers, and the principles of networking
• Career proven history of supporting and lead roles of security services at enterprise scale, preferably in a regulated environment
• Enthusiastic about security, open to learning, and able to dynamically adapt to Information Security technologies as business requirements change

• Intermediate/Advanced level of scripting/coding ability (e.g., Python, Power Shell)
• Exposure to other cloud technologies, Azure and SaaS‑based security solutions
• Infrastructure administration:
  Windows, Linux, Containers
• Configuration management and IaC (Chef, Puppet, SCCM, etc.)
• Relevant professional certifications in information technology or cloud security (e.g., CISSP, CCSP, SC‑100)
• Ability to think architecturally at the ‘big picture’ and translate this into practical security implementation

This role is based in Knutsford.