Security Engineer @ CFC

At CFC, technology is at the heart of everything we do. We are looking for Security Engineers to improve the services they own, handle the complex and new problems those services produce, and take projects through to improved operational controls. You will implement and operate controls in detection and response, identity and access, data protection, product security, or control assurance. The responsibilities below are a broad sample of security engineering across the information security function. You will specialise in a few and have a working knowledge of the rest. In this role, the successful candidate will: Improve detection rules, alerts and logs for network and endpoint activity so coverage fits CFC's technology and the current threat picture, and stores the revised rules. Conduct incident response for complex cases, from investigation through containment and recovery, and files the incident report with the revised playbook. Conduct threat assessments, including attack-path reviews and threat hunts, and records the intelligence and the new requirements that come out of them. Analyse vulnerability and misconfiguration findings in software, application security tests, the build pipeline, malware defences, email and web protection, secure configuration and network infrastructure, and implements the control for each confirmed finding. Produce the security design review for projects and writes security and privacy checks into the definitions of ready and done. Improve conditional access, privileged access, device verification and joiner, mover and leaver processing, and records excessive permissions in the access review. Implement data protection controls for new sensitive stores, covering loss prevention, encryption, privacy requests, insider detection and disposal, and records the classification in the data inventory. Prepare evidence for control tests and audits, checks it against the asset inventory, and updates the monitoring rules where coverage is missing. Build workflow automation and analytics for repeated security tasks, and publishes the runbook. Coordinate incident exercises and tabletops against the continuity plan, and produces the awareness training CFC colleagues use.