Security Engineer

Security Engineer

Office location; UK Wide | Hybrid, London, Manchester, Leeds

Main purpose of the role:

ITV is currently seeking a skilled Security Engineer to join our Security Engineering team. This role will be embedded with one of our devolved product teams, and will involve promoting and embedding strong security practices throughout the development lifecycle using the latest technology and processes offered by our Core Security Engineering team. As the subject matter expert, you will provide guidance and advice to the product team's engineers, and act as a single point of contact between the team and the wider Cyber Security department. Additionally, you will maintain a close relationship with our Core Security Engineering team to relay your product team's requirements, and help design, build, operate, and maintain the bespoke in-house services that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing some of the UK’s most beloved content.

Specific responsibilities:

• Use programming languages to develop serverless functions and automate processes
• Create event-driven architectures within AWS using infrastructure-as-code tooling
• Provide security expertise and support to business teams 
• Proactively identify risks to our cloud environments and implement mitigations 
• Identify and suggest security improvements for technologies, processes, and new initiatives 
• Contribute to the plan and strategy for delivering cyber awareness training and events across ITV

At ITV, we aspire to be a digitally led company that delivers brilliant content to global audiences wherever, whenever, and however they choose. To achieve our goals, we need to offer agile, reliable, and scalable security solutions that deliver security by design without compromise. 

The ideal candidate will have experience working with a modern technology stack and a strong interest in Cyber Security. The applicant will be required to gain familiarity with a variety of security tools, and professional training will be provided and customised to the individual. However, we believe in learning on the job, so we welcome applicants with a desire to build their skills and focus on security in the long term. 

To be considered for this opportunity, you must demonstrate the following skills: 

• Good understanding of security controls (e.g. IAM) within cloud environments 
• Up-to-date knowledge of common security weaknesses and associated mitigations within modern environments
• Ability to pragmatically introduce security controls
• Strong communication skills and the ability to work with all stakeholders
• Autonomy and initiative in identifying and resolving problems across the business
• Previous experience developing cloud-native applications using infrastructure-as-code best practices