Junior Cyber Security Engineer

About the Company

Our client is a fast-scaling, global commercial insurance group growing rapidly both organically and through international acquisitions across the UK, Europe, Australia, and Asia. Having acquired around forty separate businesses, they are rebuilding their technology operating model to turn a fragmented legacy infrastructure into a unified, highly secure, automated platform. Operating in an incredibly fast-paced, high-growth scale-up environment, they champion absolute autonomy and radical ownership. They move dynamically from start-up flexibility to scale-up discipline, meaning they listen well, move fast, and empower their people to execute without layers of bureaucracy or hand-holding. They are anti-bureaucracy but pro-governance, meaning regulatory compliance and security controls are delivered as code and automated platform controls rather than committees and paperwork. If you are an exceptionally bright, technically curious graduate who thrives in a rapid-iteration culture, wants hands-on exposure to modern security engineering, and seeks the freedom to build robust systems from day one, you will find a massive opportunity here.

About the Role

As part of the ongoing re-engineering of their tech division, our client is hiring a Graduate Junior Cyber Security Engineer to embed security directly into the software development lifecycle and cloud infrastructure. Reporting directly into senior engineering leadership, you will work closely with platform and infrastructure teams to ensure that automation, identity management, and continuous monitoring are built into the core foundation of the business. This is a hands-on, keyboard-level technical role—not a passive policy or compliance oversight position. You will bridge the gap between traditional security operations and modern software engineering, helping automate security controls across multi-cloud environments, modern CI/CD pipelines, and infrastructure deployments.

Key Responsibilities

• DevSecOps & Pipeline Integration: Embed automated security tools (SAST, DAST, dependency checking, container scanning) directly into GitHub Actions and GitLab CI/CD pipelines to catch vulnerabilities early in the development cycle.
• Infrastructure as Code (IaC) Security: Help define, audit, and enforce secure deployment standards across Terraform and Ansible scripts, ensuring security is delivered strictly as code.
• Cloud Security & IAM: Monitor and refine Identity and Access Management (IAM) policies, key management (KMS), and virtual network boundaries (VPCs) across AWS, Azure, or GCP environments following least-privilege principles.
• Incident Response & Vulnerability Management: Assist in analysing, triaging, and responding to system alerts, automated security scanning findings, and potential threat activity across the group's infrastructure.
• Automated Security Controls: Treat security as an engineering discipline—building automated guardrails, log monitoring, and posture management rather than relying on manual checklists or regulatory paperwork.
• Cross-Functional Collaboration: Partner directly with developers and system engineers to provide actionable remediation advice and educate teams on modern secure coding practices.
• DevSecOps & IaC Fundamentals: Exposure to or foundational knowledge of Terraform, Ansible, Docker, and CI/CD pipelines (GitHub Actions/GitLab).
• Cloud Security Basics: Hands-on exposure to cloud architecture (AWS, Azure, or GCP), specifically around IAM, key management, and cloud networking (VPCs/VNets).
• Engineering & Automation Mindset: Scripting or development experience (e.g., Python, Bash, or Go) paired with a desire to solve security challenges through automation rather than manual processes.
• Problem Solving & Intellectual Agility: Exceptionally bright, self-driven, and capable of picking up complex modern security frameworks and tools rapidly in a fast-paced environment.
• Clear Communication: Ability to articulate security risks and technical remediation steps clearly to software developers and engineering peers.

Qualifications & Experience

• Academic Background or Practical Proof of Skill: A degree in Computer Science, Cyber Security, Software Engineering, or a related STEM discipline. Alternatively, strong practical proof of skill demonstrated through a GitHub portfolio featuring automated lab deployments, CTF write-ups, or active personal projects.
• Clearance Eligibility: Candidates must be eligible for UK Security Clearance (SC), which opens up engagement opportunities across high-assurance, defense, and government-adjacent work streams in London and the M4 corridor.
• Industry Experience: Internship, placement, or sandwich-year experience in a modern tech, platform, or security environment is considered a strong positive.
• Industry Certifications (Desirable): Holding an active CompTIA Security+, AWS Certified Solutions Architect (Associate), or AWS Certified Security - Specialty is a plus. Certifications are treated as evidence of technical depth and curiosity, never as a barrier to apply.
• Insurance Sector Awareness (Desirable): A basic understanding of commercial insurance or financial services dynamics is a great benefit, though not strictly required.