Job Description:

Overview:
The Senior Security Engineer will be based on a hybrid basis from our stunning office in central Leeds, so you’ll need to be within a commutable distance to allow you to travel to the office.  You will report to the Head of Information Security Transformation, providing hands-on technical expertise to uplift security capabilities and supporting the delivery of secure solutions across the organisation.
The Senior Security Engineer will play a key role in embedding security into the design and build phases of technology projects, ensuring solutions are secure, compliant and aligned with enterprise security standards.
You’ll get the chance to follow your chosen career path anywhere in MUFG Pension & Market Services, joining a network of experienced, innovative and dedicated individuals across multiple teams and countries.  There are numerous opportunities to learn new skills and develop in your career with the support you need to succeed.

Benefits:
26 days annual leave, plus a wellbeing day, a volunteer day, bank holidays and the opportunity to buy up to 5 days’ extra each year
Health, wellbeing and lifestyle rewards that can be tailored to support you and your family.  Everything from: Employee Assistance Programme; Discounts on retail and socialising; Travel and technology; cycle2work scheme; A host of gym and fitness subscriptions; Car Salary Sacrifice scheme
Appreciate programme: Employee recognition programme
Company Pension Scheme
Medical insurance
Life Assurance
Paid Maternity, Paternity, Adoption Leave, Shared Parental Leave

What you need:
As with any role, we want to find the right person and we want to make sure you know it’s the right role for you too.  You will need:
•    A minimum of 7 years’ experience in a technical security role, with experience supporting delivery across design and build phases
•    A solid understanding of application security, cloud architecture and infrastructure security principles
•    Practical experience integrating security into Agile and DevOps pipelines
•    Proficiency with tools including Zscaler, CASB, OKTA, Office 365, Azure AD, Citrix and Active Directory
•    Working knowledge of Agile and product-centric project environments
•    Strong technical problem-solving and analytical skills 
•    Excellent verbal and written communication skills, with the ability to build and maintain relationships with a variety of colleagues of all levels
•    The ability to translate security concepts into actionable guidance for technical and non-technical stakeholders
•    A collaborative and proactive attitude, enabling you to work in multidisciplinary project teams whilst managing multiple concurrent priorities
•    A hands-on mindset with a focus on secure enablement and delivery excellence

Day to Day, you will:
•    Actively contribute to technology projects during both the design and build phases, reviewing configuration changes, providing input into security policies and control baselines and ensuring security is embedded early and effectively
•    Collaborate with architects, engineers and delivery teams to review technical designs and provide security input into solutions architecture
•    Translate security requirements into practical implementation guidance, ensuring alignment with business objectives and compliance standards
•    Participate in project planning, estimations and workshops to represent security interests and influence outcomes
•    Design and implement security solutions across applications, infrastructure and cloud environments, supporting the integration of security controls into CI/CD pipelines, automation frameworks and infrastructure-as-code environments
•    Deploy and manage tools such as DLP, WAF, DAM, endpoint protection, SIEM and IAM solutions
•    Conduct technical risk assessments, threat modelling and control validation during project execution, serving as a point of escalation for complex technical security issues during project implementation
•    Contribute to the design and build of secure cloud-first environments, primarily in Microsoft Azure
•    Apply in-depth understanding of network, compute and storage security across hybrid cloud environments
•    Support secure configuration, monitoring and hardening of systems in collaboration with infrastructure and platform teams
•    Leverage hands-on experience with technologies, including Azure AD, Office 365, Zscaler, Citrix, CASB and Active Directory
•    Support audit readiness and evidence gatherings for new solutions
•    Ensure all designs and implementations comply with internal policies and regulatory obligations, identifying security gaps or control failures during project delivery and support timely remediation
•    Prepare documentation, including build guides, runbooks and security implementation plans, contributing to the continuous improvement of secure design patterns and delivery processes
•    Provide mentoring and technical guidance to junior engineers within the team or project streams and actively engage in team standups, architecture reviews and delivery retrospectives to share learnings and promote secure delivery practices

The above list of key accountabilities is not an exhaustive list and may change from time-to-time based on business needs.