Security Engineer

At Direct Line Group, insurance is just the start. Combining decades of industry experience with talented people in every field from data, technology, customer care and auto repair, to HR, finance, and procurement, we're a customer-obsessed market powerhouse. And we all work together to be brilliant for customers, every single day.

Our CISO function is created by Cyber Defence Centre, Business Resilience, Privacy & Information Management, Strategy & Operating Office and Security Design, Innovation & Enablement.

What we look for

We are looking for a Security Engineer who will provide security-related technical and functional support for DLG security tooling and services, overseeing the delivery of security services to a high standard, and maintaining the health and effectiveness of controls to ensure we are adequately protected against existing and horizon threats identified by our Threat Intelligence and Operational Security teams.

Who you will work with

As a Security Engineer you will become a member of the Security Engineering team within the Cyber Defence Centre, and you will report to the Security Engineering Manager.

What you will do

• Maintain the overall security integrity of DLG's environment.

• Improve secure, continuous integration pipelines whilst working closely with our developers to advise on standard methodology.

• Support projects and change programmes ensuring that they align with the security architecture framework and that solutions meet relevant information security fundamentals.

• Maintain a technical assurance approach that provides confidence to colleagues whilst ensuring that the value of proposed changes will be achieved.

• Take responsibility and act as a technical SME for securing DLG's environments in line with compliance commitments.

• Ensure security technical platforms are configured to optimise the overall security offered to DLG.

• Improve Security Information and Event Management (SIEM) coverage of DLG's overall environment.

• Make sure that all changes to the production environment have been reviewed and approved.

• Communicate and build relationships at various levels with an ability to discuss deep technical concepts with counterparts from our suppliers but also communicate at a higher level with project managers and programme leads to convey the processes and timings of programme and project delivery.

• Develop technical security standards and ensure all changes are in line with the network security architecture.

What you will need

If you have Computer Science, Engineering, information security or STEM experience we would like to hear from you.

• Network Infrastructure: In-depth knowledge of routing, TCP/IP, Internet protocols, and network security management.
• Security Technologies: Expertise in Web Application & Network Firewalls, IDS/IPS, File Integrity Monitoring, SIEM, Advanced Endpoint Protection.
• Security Management: Advanced skills in vulnerability management, event management, application security, incident response, forensics, and encryption.
• Technical Proficiency: Strong foundation in algorithms, data structures, databases, networks, and tool development.

Desirable Skills

• Proficiency with Microsoft security tooling.
• Familiarity with Cyber Defence areas, including threat intelligence, detect and response, and engineering.
• Understanding of risk assessment in technical decision-making.
• Experience in financial environments.

Qualifications

• Essential certifications: CISM, CISSP, M.Inst.ISP, or CISA.
• Preferred certifications: GCIH or ECIH by recognized professional bodies.

What we'll give you in return:

We wouldn't be where we are today without our people and the wide variety of perspectives and life experiences they bring. That's why we offer excellent benefits to suit your lifestyle and a flexible working model combining the best parts of home and office-working, varying with the nature of your role.

Core benefits include:

• 9% employer contributed pension
• 50% off home, motor and pet insurance plus free travel insurance and Green Flag breakdown cover
• Up to 10% annual bonus
• 25 days holiday (rising by 1 each year to 28) + bank holidays and option to buy or sell up to 5 days
• Additional optional Health and Dental insurance
• EV car scheme allows all colleagues to lease a brand new electric or plug-in hybrid car in a tax efficient way.
• Buy as you earn share scheme
• Employee discounts and cashback
• Plus many more

Ways of Working

Our hybrid model way of working offers a 'best of both worlds' approach combining the best parts of home and office-working, offering flexibility for everyone. When you'll be in the office depends on your role, but most colleagues are in 2 days a week, and we'll consider the flexible working options that work best for you.

We recognise and embrace people that work in different ways so if you need any reasonable adjustments within this recruitment process, please reach out to us and we can discuss how we can support you with this.

There's no-one else like you.

No-one with the exact same mix of strengths, quirks, skills and thoughts. That's why you could belong here. As part of a team of brilliant individuals, in a place that empowers you to be the best you can be. We're proud of who we are, of what we do, and what every single one of us brings.

Join us.

Help us keep innovating and putting customers at the heart of everything. To be an insurance company of the future. When we work together, we can all achieve great things. Inspiring, challenging, and supporting each other to aim higher.

Together we're one of a kind.

Collectively we help every business within our group aim higher. Standing shoulder to-shoulder to stand out in the market, we want to be an insurance company of the future. And with so many areas to choose from, your ambitions are welcome here. See your opportunity to start a career that's varied, distinct and exciting.

Visit directlinegroupcareers.com

#LI-Hybrid

#LI-GY