Senior Cloud Security Engineer

Job Description

End Date Thursday 03 November 2022 Salary Range £52,912 - £66,140 We support agile workingclick here for more information on agile working options.Agile Working Options Flexible / Variable Hours, Other Agile Working Arrangements / Open to Discussion Job Description Summary Lloyds Banking Group is the UKs largest Digital, Retail and Commercial Bank with a focus on Helping Britain Prosper. Were on a mission to build the bank of the future, and we need your help do it! Continuing our extensive transformation programme, were redefiningwhat a bank is from the inside out. Our technology, our culture, and our mind-set are changing to craft a true engineering-led organisation.Our Cloud Services department is looking for a motivated individual to ensure that the appropriate security controls are in place, focusing on keeping bank services safe while simultaneously supporting programme timescales and business outcomes. Youll be securityrequirements, designs, risks and defining controls to mitigate these risks and guiding other areas of technical programmes to embed security in the best manner for the Bank. As a Senior Cloud Security Engineer, you will be working across the Groups strategiccloud platforms (Azure, GCP, AWS) to realise the next generation of services that form the Banks vision for 2022 and beyond. Job DescriptionSenior Cloud Security EngineerLloyds Banking GroupLeeds (Remote & Flexible working, must be able to attend local office once per week) Salary & Benefits: £59,912 - £66,140 (depending on experience) base salary, plus annual personal bonusWho are Lloyds Banking GroupLloyds Banking Group is the UKs leading digital franchise, with over 13 million active online customers across our three main brands - including Lloyds Bank, Halifax and Bank of Scotland - as well as the biggest mobile bank in the country. Were buildingthe bank of the future, and we need your help. Were continuing our extensive transformation Programme, with an investment of £3bn, redefining what a bank is from the inside out.Where does this role sit Our remit includes delivering new security products and services whilst continually improving our existing ones.This Senior Cloud Security Engineer role will involve working in one of our Product Teams (Perimeter + Network Security, Access Gateways + SecurityLogging, Platform Compliance, Threat Modelling + Control Curation,Security Product Curation) where responsibilities will include Build as well as Run tasks. Examples of tasks will include: product / control design and governance, investigations and assessments,terraform module creation and enhancements for cloud resource delivery and consumption, supporting roadmap planning for upcoming features against consumer use-cases, defect management and incident support, platform maturity and automation.Together we make it possible!The role will have end-to-end accountabilities including:

• Providing security leadership, guidance and consultation to diverse teams built from a mixture of LBG employees, contractors and 3rd party consultants
• Owning the end-to-end security view for specific platform components, shared services or application integration items
• Becoming an SME for Products / Services in your aligned Product Team: delivering change, fulfilling run tasks and scoping then delivering enhancements to existing capabilities / processes
• Supporting new joiners and enhancing onboarding / upskilling processes
• Contributing to team and platform maturity with recommendations, ideas and improvements
• Working with an Engineer Lead and Product Owner to define a roadmap for Product Team owned Products + Services
• Self-managing and proactive attitude and approach to tasks assigned
• Balancing the needs of the business and security with a risk-based approach

The role will require you to be hands-on, to collaborate with peers to engineer new or enhance infrastructure level capabilitiesWhat youd get involved with:

• Working with architects and engineers to collaboratively define the mid and low level security requirements into a collection of design and engineering activities to ensure that the programme is delivering against agreed security standards and principles
• PoCs of new products / use-cases
• Operational documentation for support and consumption of products
• Proactively identifying security risks
• Onboarding and upskilling paths for Product Team products, tasks and processes
• Identify shortcomings and opportunities: suggesting and implementing improvements
• Contributing to and helping create an inclusive and collaborative environment for engineers to grow, develop and deliver value to platform consumers
• Performing threat modelling against architectures, engineered solutions, and as-is platforms
• Working with technical colleagues to overlay new requirements with the evolving threat landscape and work with vendors to ensure product development keeps pace with our needs

Whats needed to be considered for this jobEssential:

• Hands on engineering experience working with: Terraform, Python, Docker, Kubernetes, Jenkins, Azure DevOps, GitHub, CI/CD, IaC, PaaS
• At least 3 years DevOps / Engineer experience
• Experience working on a Public Cloud - Azure, GCP or AWS
• Self-starter and able to self-manage workload
• Have a drive to improve the environment you operate within: ownership and proactiveness in identifying constraints, and idea generation to mature and deliver improvements
• Practical / theoretical experience of Cloud Security
• Ownership and proactive management of assigned work
• Able to demonstrate completion of technical, hands-on tasks (writing code, interacting with APIs, deploying / managing infrastructure, Cloud / Security focused qualifications)

Desirable:

Exposure to multiple Public Clouds - Azure, GCP or AWS

Cloud and Security certifications

Worked within a Cyber Security engineering teamExperience: Cloud Product curation; terraform module development; Guardrail and control definition and development, continuous Cloud compliance enforcement, roles in large ent