At a Glance
- Tasks: Minimise attack surfaces and enhance security through vulnerability management and automation.
- Company: Wellington Management, a leading investment management firm with a collaborative culture.
- Benefits: Competitive salary, flexible remote work, and opportunities for professional growth.
- Other info: Dynamic work environment with a focus on innovation and career development.
- Why this job: Join a passionate team tackling cyber-security challenges and making a real impact.
- Qualifications: Experience in cyber-security, scripting, and vulnerability assessment is preferred.
The predicted salary is between 63000 - 77000 £ per year.
Wellington Management offers comprehensive investment management capabilities that span nearly all segments of the global capital markets. Our investment solutions, tailored to the unique return and risk objectives of institutional clients in more than 60 countries, draw on a robust body of proprietary research and a collaborative culture that encourages independent thought and healthy debate.
This engineer will assist in the minimization of potential attack surfaces through vulnerability management, cloud configuration assessments, incorporating threat intelligence from public and private sources, and work internally to build, enhance, and automate policies, standards, and processes. They will be working with various technologies that surface vulnerabilities, misconfigurations, end-of-life software, and other vectors. The ideal candidate is one that has a passion for cyber-security, is naturally curious, and is willing to think outside the box to find creative solutions to challenges.
- Perform assessments and communicate to stakeholders on the likelihood of exploitation and potential impact of vulnerabilities, misconfiguration findings, and other potential vectors to determine the appropriate course of action to mitigate potential risk.
- Act as a security liaison between Information Security and the Development staff to bring a security mindset to the software development lifecycle.
- Lead urgent vulnerability response, misconfiguration events, or otherwise assist with Cyber Defense as needed.
- Use scripting and AI to automate manual workflows, assist with data assessments, and shorten time gaps from ideas to outputs.
- Review both internal and open-source threat intelligence sources for recently disclosed vulnerabilities at risk of introduction into the Wellington environment.
- Work with our Third-Party Risk team to engage third parties in Wellington’s vendor ecosystem to understand when third and fourth parties may be exposed to critical vulnerabilities.
- Contribute to firmwide documentation by being an SME contributor to policies and standards.
Ability to self-motivate, with an eagerness to dig into potential risks. BS degree in Information Systems/related discipline or equivalent IT work experience. Experience in developing new processes and procedures that match evolving attack surfaces. Hands-on experience with vulnerability assessment software and prioritizing results using a combination of various frameworks tied to internal objects (CVE, CVSS, EPSS, etc.). Previous experience assessing, documenting, and communicating information security risk, particularly related to cyber vulnerabilities is preferred. Experience in the use of common scripting languages such as Python to automate job functions. Working knowledge of IaC (Infrastructure as Code) concepts, especially with AWS. Knowledge in the areas of network architecture and engineering and software application development. Working knowledge of the use of threat intelligence feeds and resources.
Preferred: Experience working with Splunk, JFrog Artifactory, JFrog Curation (or similar), ServiceNow, AWS Services, MS Azure, MS Intune, Anthropic Claude. Home labs, security practitioner meetups, research, we would love to hear it!
If you believe that you could excel in this role, we encourage you to apply and welcome a chance to review your background. We are dedicated to building and maintaining a diversified workforce and considering a broad array of candidates with a variety of skill, workplace experiences, and backgrounds.
As an equal opportunity employer, Wellington Management ensures that all qualified applicants will receive equal consideration for employment without regard to race, colour, sex, sexual orientation, gender identity, gender expression, religion, creed, national origin, age, ancestry, disability (physical or mental), medical condition, citizenship, marital status, pregnancy, veteran or military status, genetic information or any other characteristic protected by applicable law.
We believe that in-person interactions inspire and energise our community and are essential to our culture. In support of this commitment, our employees work from our offices 4 days a week with flexibility to work remotely 1 day a week. We believe that this approach ultimately supports our mission to deliver investment excellence to our clients and their beneficiaries over the long term.
Location: London, United Kingdom
Type: Full time
Sr Engineer - Systems Engineering in London employer: Wellington Management
Wellington Management is an exceptional employer, offering a dynamic work environment in the heart of London where creativity and collaboration thrive. With a strong emphasis on employee growth, you will have access to professional development opportunities while enjoying a hybrid work model that promotes work-life balance. Join a team that values innovation and compliance, ensuring your contributions are meaningful and impactful in the world of finance.
StudySmarter Expert Advice🤫
We think this is how you could land Sr Engineer - Systems Engineering in London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Wellington Management, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Wellington Management
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Wellington Management. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Sr Engineer - Systems Engineering in London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Wellington Management insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Wellington Management that you’re committed to staying ahead in the game.
How to prepare for a job interview at Wellington Management
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Wellington Management to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Wellington Management.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
