Information Security Engineer

As an Information Security Engineer, you will focus on IT Security and work alongside other teams to ensure IT systems are built and operated in a secure manner.

Full-time

Closes 03/12/2025

The Information Security engineering team focuses on the technical side of system design, data security and functional audit, ensuring systems and services are built with privacy and security by design. You will be working with colleagues within our Governance and Compliance functions to provide audit capabilities, and confirm data is being used within the bounds of regulatory requirements.

The team ranges from graduates to time-served engineers with backgrounds in Sys Admin, networks, service operation as well as security. We use market-leading, enterprise level tools to identify threats to the systems, as well as in-house developed scripts and internet research.

This is a fast-paced and dynamic role, reacting to the evolving threat landscape and changing Business priorities.

This role is eligible for inclusion in the Company’s hybrid working from home policy.

Experience in Information Security engineering, with a focus on API integration and secure coding.

Strong practical knowledge of Python, Java, and Power Shell.

Solid understanding and experience with CI/CD pipelines.

Experience with security technologies and automation principles such as Ansible and Puppet.

Experience with container security such as Docker and Kubernetes, within Cloud environments including AWS, Azure ad GCP.

Knowledge of secure coding practices and common vulnerabilities such as OWASP Top 10.

Experience with application integration methodologies.

Deep knowledge of ITIL principles and IT Security governance frameworks ISO 27001, NIST, PCI DSS, CIS Controls and benchmarks.

Complete understanding and practical security implementation experience in Microsoft and Linux OS including RHEL7,8,9, CentOS 6, 7 and Ubuntu 22.04, 24.04.

High attention to detail, excellent documentation skills and ability to work to deadlines.

Developing and maintaining secure code for automation scripts and application integrations using Python, Java, and Power Shell.

Designing and implementing security automation solutions to streamline security operations.

Maintaining and improving internally built systems.

Implementing and managing various Security tools.

Participating in Security Engineering projects.

Undertaking security related investigations.

Liaising with stakeholders to ensure that external documents are completed safely and that Information Security requirements are complied with.

Creating and updating technical documentation.

Performing daily routine security checks and audits.

Staying up to date with new and emerging threats and escalating any of interest to appropriate teams for further evaluation.

Eye care and flu vaccinations

Life assurance

We are a unique global operator with passion and drive to be the best in the industry. Our values form the foundation of culture and shape the unique way that we work. People are our superpower and we support you to be the best you can be.