At a Glance
- Tasks: Design and build security observability capabilities while automating control monitoring.
- Company: CFC, a leader in cyber insurance with a focus on innovation.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Other info: Collaborative culture with a focus on raising security standards across technology.
- Why this job: Join a dynamic team to tackle complex security challenges and make a real impact.
- Qualifications: Strong background in security engineering and experience with cloud environments.
The predicted salary is between 60000 - 80000 £ per year.
At CFC, technology is at the heart of everything we do. As a market leader in cyber insurance and a business built on innovation, we’re looking for a Staff Security Engineer to play a critical role in evolving our security capabilities and driving measurable risk reduction across our global technology estate. This is a senior individual contributor opportunity for an engineer who enjoys solving complex security challenges at scale.
You’ll work across engineering, data, AI and digital workplace teams to build security observability, automate control assurance and influence how security is embedded into products, platforms and processes. If you're passionate about turning security data into actionable insight, building elegant automation and raising the security maturity of a fast-moving technology organisation, we'd love to hear from you.
About the role
- Designing and building security observability capabilities that provide meaningful visibility across systems, infrastructure and applications
- Developing automated control monitoring, evidence collection and continuous testing solutions that strengthen security governance
- Partnering with engineering, data and technology teams to embed effective security controls into products and platforms
- Driving improvements in security event monitoring, exposure management and alerting capabilities
- Conducting security reviews of new products, services and technology initiatives
- Building meaningful security metrics and reporting that support informed decision-making
- Supporting the evolution of security policies, standards and technical guardrails through automation and measurable outcomes
- Contributing to access governance and security control assurance activities across both human and non-human identities
- Acting as a technical leader and trusted security advisor, helping raise standards across the wider technology organisation.
About you
We're interested in hearing from engineers who combine strong technical depth with a practical, collaborative approach to security.
- A strong background in security engineering, information security, governance, risk or compliance
- Experience building security controls and automated security solutions within modern cloud environments
- Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms
- Experience working with APIs, automation, scripting and infrastructure-as-code technologies
- Familiarity with cloud platforms including Azure, AWS or GCP
- An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls
- Experience operating in regulated environments and working with security and data protection requirements
- Excellent communication skills and the ability to influence stakeholders across technical and non-technical teams
Staff Security Engineer employer: CFC Underwriting
CFC is an exceptional employer that fosters a dynamic and collaborative work environment in the heart of London. With a strong focus on employee growth, we offer numerous opportunities for professional development and innovation within our operations team. Our commitment to driving efficiencies and best practices ensures that every day presents new challenges and rewards, making it an ideal place for those looking to make a meaningful impact in the insurance industry.
