3 days ago
London, United KingdomSenior
Responsibilities
- Diagnose and refine security detections, alerts, and logs to improve monitoring coverage.
- Lead incident response from investigation through containment and recovery, including incident reports and revised playbooks.
- Design and operate threat assessment services involving threat profiling, modelling, attack simulation, and threat intelligence.
- Identify root causes of vulnerabilities and misconfigurations across software, application security tests, build pipelines, malware defenses, email and web protection, secure configuration, and network infrastructure.
- Provide security design guidance and lead security requirements in project definitions of ready and done.
- Diagnose failures in conditional access, privileged access, device verification, and identity lifecycle controls.
- Implement data protection controls covering data loss prevention, encryption, privacy requests, insider detection, and disposal.
- Evaluate audit and continuous control monitoring findings, trace gaps, and update standards and monitoring.
- Build workflow automation, integration templates, self-service processes, and analytics for recurring security tasks.
- Lead incident exercises and continuity-plan tabletops, and coach colleagues through awareness training.
- Build and mature security standards, workflows, guidance, and operational controls.
Requirements
- Proven experience in a technical security role, including security operations, threat detection and response, security engineering, cloud security, or application security in a fast-paced regulated organization.
- Strong knowledge of CI/CD, cloud-native architecture, Infrastructure as Code, and software supply-chain security.
- Experience leading threat modelling and resolving complex security and privacy design trade-offs.
- Ability to assess and deploy emerging data protection, AI, and agentic engineering practices pragmatically and establish proportionate controls.
- Ability to influence senior technical and non-technical stakeholders through evidence, technical credibility, and pragmatic judgment.
- Experience guiding earlier-career engineers and coaching people through exercises or training sessions.
- Strong analytical and problem-solving skills for assessing complex risks, identifying root causes, and delivering practical threat- and risk-informed solutions.
Categories
About CFC
CFC is a London‑headquartered specialist insurer that builds technology‑driven products for businesses, with particular strength in cyber and other emerging risks. Founded in 1999, it underwrites lines including cyber, intellectual property, management liability, medical malpractice, product recall, and property & casualty, distributed primarily through brokers worldwide. CFC serves customers in over 90 countries and offers coordinated incident response to help clients manage cyber incidents from notification to resolution.