At a Glance
- Tasks: Lead cybersecurity initiatives to enhance engineering platform security and maturity.
- Company: Join a major player in financial services focused on engineering excellence.
- Benefits: Attractive salary, comprehensive benefits, and opportunities for professional growth.
- Other info: Collaborative culture with opportunities to influence senior leadership.
- Why this job: Make a significant impact on cybersecurity in a dynamic, regulated environment.
- Qualifications: Extensive cybersecurity experience and strong understanding of engineering platforms.
The predicted salary is between 72000 - 88000 £ per year.
Our client is looking for a highly experienced
Cybersecurity SME / Consultant to join an Engineering Excellence & Enablement team within a major financial services environment. The role will focus on assessing and improving the cybersecurity maturity of engineering platforms , ensuring build systems, CI/CD pipelines, runtime infrastructure and developer tooling are secure by design.
Key Responsibilities
- Develop and maintain an
Engineering Platform Cybersecurity Maturity Framework .
- Conduct security assessments across
CI/CD, build systems, runtime infrastructure and developer tooling .
- Perform threat modelling, gap analysis and risk assessments to identify systemic security risks.
- Define secure architecture patterns, security baselines and policy-as-code controls.
- Partner with platform owners to address gaps around artifact integrity, access control and configuration security .
- Embed vulnerability management, SBOM, software provenance and code-signing practices.
- Develop security roadmaps based on business risk, regulatory requirements and operational priorities.
- Advise senior technology and cybersecurity stakeholders and translate technical risks into business impact.
- Represent cybersecurity within governance forums and drive adoption across engineering teams.
- Track maturity improvements and continuously evolve security frameworks and secure-by-design practices.
- Strong cybersecurity experience within large-scale regulated financial services or similarly complex environments.
- Deep understanding of engineering platforms, CI/CD, build systems, artifact repositories and developer tooling .
- Strong
Dev Sec Ops experience, including secure pipeline design and automated security controls.
- Knowledge of service mesh, cryptography, network security, application security, vulnerability and risk management .
- Proven experience with threat modelling, security assessments and gap analysis .
- Experience developing cybersecurity maturity models, frameworks and strategic roadmaps .
- Strong stakeholder management with the ability to influence senior technology leadership.
- Ability to translate complex technical security risks into clear business impact.
- Experience with cloud security (AWS/Azure/GCP) and Kubernetes is advantageous.
- Knowledge of
SLSA, SBOM, software supply-chain security or secure developer tooling is highly desirable.
#J-18808-Ljbffr
Lead Engineer in Sheffield employer: Queen Square Recruitment
As a Senior Cybersecurity Engineer at Queen Square Recruitment, you will be part of a dynamic team within a leading financial services environment that prioritises innovation and security. The company fosters a collaborative work culture, offering extensive professional development opportunities and a commitment to employee growth, ensuring you can advance your career while making a meaningful impact on cybersecurity practices. Located in a vibrant area, the role provides unique advantages such as access to industry-leading resources and a network of experts dedicated to excellence in engineering and security.
