Security Engineer -

As a Security Engineer here, you will sit within the Security & Resilience department, assisting a wide range of delivery teams in engineering secure solutions and protecting our members' money and data. We believe security is a systemic concern; therefore, security problems should be solved by a systemic approach. We will have regular forums in which we consult with other security engineers within the team, looking at the problems from each of our specialities' perspectives. We are happy to consider flexible working approaches to help you perform at your best. At Nationwide, we offer hybrid working wherever possible, bringing colleagues together across our UK wide estate while also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected. For this job, you will spend at least two days per week, or if part-time, you will spend 40% of your working time based at either our Swindon, London, Northampton or Bournemouth office.

What you will be doing:

• Work cross-functionally to assess risk and help deliver countermeasures that protect our members' data.
• Work with engineering teams to create solutions that solve or remediate security problems.
• Engage in activities including threat modelling, selection and configuration of DevSecOps tools, high-level and detailed security designs.

About you:

We are looking for a Security Engineer with experience in design and implementation of secure software. You should have demonstrable experience in:

• Fundamental technical expertise - understanding of basic software engineering principles, system architecture and modern development frameworks.
• Understanding of cryptographic primitives and protocols.
• Programming with at least one modern language, an appreciation of software development lifecycle, software delivery methodologies and experience with industry-standard tools and methods for delivering software in an enterprise environment (version control, CI/CD pipeline, etc.).
• Threat modelling in the cloud or on-prem environment.
• Authentication and authorisation, Role Based Access Control (RBAC).

Our Customer First behaviours are all about putting customers and members at the heart of how we work together. You can strengthen your application by showing the behaviours that resonate with you, and how you might have already demonstrated these:

• Say it straight - This is about being honest and direct with good intent and saying what needs to be said in the room.
• Push for better - This is about aiming high and constantly looking for better in how we work together and serve our customers and members.
• Get it done - This is about prioritising what will have the greatest impact, being decisive and taking accountability for delivering on the end-to-end outcome.

The extras you will get:

• A personal pension – if you put in 7% of your salary, we’ll top up by a further 16%.
• Up to 2 days of paid volunteering a year.
• Life assurance worth 8x your salary.
• A great selection of additional benefits through our salary sacrifice scheme.
• Wellhub – Access to a range of free and paid options for health and wellness.
• Access to an annual performance-related bonus.
• Access to training to help you develop and progress your career.