IT Security Engineer – Insurance / Risk Assessments / Security Strategy / Google Cloud
A leading London based insurer is looking for an IT Security Engineer. The role will be based within the company’s IT security department. You will be expected to carry out a range of security activities, including risk assessments, advising teams on security requirements and implementing security controls.
A considerable part of the role will be working within a new project transforming the company’s approach to IT. In making this transformation, we want to ensure it is subject to the highest standards of IT security. You’ll be the subject-matter expert for security, working alongside software engineers, devops engineers and data scientists. We’re seeking a security specialist with a broad understanding and experience of the agile workflow and the software development lifecycle. You’ll also have experience of having worked within an environment with an emphasis on automation from development through to operations.
The IT Security Engineer will carry out the following:
- Advise on and ensure the confidentiality, integrity and availability of a CI/CD Pipeline.
- Peer review pull requests w.r.t security.
- Write up security stories for the backlog and to be acted upon in sprints.
- Audit cloud security controls.
- Develop Security test cases to implement into CI tooling.
- Ensure that API integration is conducted in a secure manner.
- Review risk and threat of new security vulnerabilities.
The IT Security Engineer will have the following skills & knowledge:
- Ability to defend and substantiate decisions on security.
- The desire to remain at the forefront of technology.
- Experience in a finance or fintech environment.
- Expertise in a cloud-based environment, ideally with Google Cloud.
- Previously worked in an agile team.
- Appreciation of DevOps and CI/CD practices.
- Ideally, an ability to read source code and identify vulnerabilities.
- Google Cloud Platform
- Kubernetes (with Helm, Docker, Minikube)
- The PyData stack (pandas, sklearn, statsmodels, etc)
- Gitlab (and Gitlab CI)