Staff Security Engineer

CFC

Staff Security Engineer at CFC, focusing on enhancing security capabilities for technology. Collaborating across teams to drive risk reduction, automate processes, and improve security observability.

Posted 7/20/2026full-timeLondon • 🇬🇧 United KingdomLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering and governance, with a strong focus on building automated security solutions and controls within cloud environments. Proficient in security frameworks and compliance standards, with the ability to communicate effectively across diverse teams.

Highest-signal resume keywords

Security EngineeringAutomated Security SolutionsCloud Security ControlsSecurity FrameworksCommunication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringGovernanceRisk ManagementComplianceAutomated Control MonitoringSecurity TechnologiesAPIsScriptingInfrastructure-as-CodeSecurity Metrics

Soft Skills

Excellent CommunicationInfluencing Stakeholders

Tools & Technologies

SIEMVulnerability ManagementData ProtectionEndpoint SecurityExposure ManagementAzureAWSGCP

Certifications & Qualifications

ISO 27001SOC 2CIS Controls

Industry Keywords

Security GovernanceAccess GovernanceSecurity Control AssuranceRegulated EnvironmentsSecurity Policies

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Designing and building security observability capabilities that provide meaningful visibility across systems, infrastructure and applications
Developing automated control monitoring, evidence collection and continuous testing solutions that strengthen security governance
Partnering with engineering, data and technology teams to embed effective security controls into products and platforms
Driving improvements in security event monitoring, exposure management and alerting capabilities
Conducting security reviews of new products, services and technology initiatives
Building meaningful security metrics and reporting that support informed decision-making
Supporting the evolution of security policies, standards and technical guardrails through automation and measurable outcomes
Contributing to access governance and security control assurance activities across both human and non-human identities
Acting as a technical leader and trusted security advisor, helping raise standards across the wider technology organisation

Requirements

What you’ll need

A strong background in security engineering, information security, governance, risk or compliance
Experience building security controls and automated security solutions within modern cloud environments
Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms
Experience working with APIs, automation, scripting and infrastructure-as-code technologies
Familiarity with cloud platforms including Azure, AWS or GCP
An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls
Experience operating in regulated environments and working with security and data protection requirements
Excellent communication skills and the ability to influence stakeholders across technical and non-technical teams

Benefits

Comp & perks

Love what you do: We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything: We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good: Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.