Cyber Security Engineer

About the role

The Financial Times is seeking a Cyber Security Engineer to strengthen application security across its cloud‑native technology estate. This hands‑on role focuses on making secure engineering seamless for product, platform and software teams.

Key responsibilities

• Design and maintain developer‑friendly security guardrails in GitHub‑based CI/CD pipelines.
• Integrate and manage SAST, software composition analysis, secret scanning and vulnerability management tools.
• Provide clear, actionable security findings and guidance to engineering teams.
• Collaborate on practical threat modelling, triage application vulnerabilities, and improve security playbooks.
• Assist teams in remediating issues pragmatically, ensuring security is part of the delivery flow.

Required profile

• Proven application security experience in modern engineering environments.
• Developer‑centric mindset with the ability to explain risks clearly and reduce friction.
• Hands‑on experience in vulnerability management and remediation.
• Comfort working with engineers, tooling, and security processes.
• Exposure to AWS, cloud security or infrastructure‑as‑code security is a plus.

Required skills

• Application security
• SAST (Static Application Security Testing)
• Software composition analysis
• Secret scanning
• Vulnerability management
• Secure coding guidance
• CI/CD pipelines (GitHub)
• AWS (basic exposure)
• Threat modelling