Senior Cyber Controls Engineer

Job Title: Senior Cyber Controls Engineer

Location: UK Hybrid

Salary: Competitive

Why Apply?

This is a hands-on Cyber Controls Engineer role sitting at the heart of a major cybersecurity controls monitoring programme. You'll build the technology that automatically checks whether cybersecurity controls are actually working, replacing manual, point-in-time testing with continuous monitoring.

You'll be the technical engineer behind the Cyber Controls Monitoring platform, connecting it to systems across the technology estate and automating the collection and testing of evidence.

Senior Cyber Controls Engineer Responsibilities

• Design, build and maintain integrations between the Cyber Controls Monitoring platform and enterprise technology systems.
• Use APIs, existing connectors and custom-built integrations to pull security and control evidence from source systems.
• Build automated processes that test cybersecurity controls and identify failures, gaps and downward trends.
• Develop and maintain data pipelines that extract, normalise and securely transfer control evidence.
• Use Python and PowerShell to build automation and integration processes.
• Use Jenkins, GitHub Actions or similar CI/CD tooling to deploy and maintain integrations and platform configurations.
• Integrate with technologies such as Okta, CrowdStrike, Active Directory, Jira and AWS security services.
• Work with cybersecurity, engineering, risk and GRC teams to understand what evidence is required to demonstrate that controls are operating effectively.
• Help develop reporting and BI integrations that provide visibility of control health and maturity.

Senior Cyber Controls Engineer Requirements

• A solid understanding of cybersecurity controls and frameworks, particularly NIST CSF
• Strong hands-on engineering experience building API integrations, connectors and automated processes.
• Good scripting experience with Python, PowerShell or similar.
• Experience with CI/CD tooling such as Jenkins or GitHub Actions.
• With knowledge of ISO 27001, SOX and PCI-DSS beneficial
• Experience with GRC, Cyber Controls Monitoring or security assurance platforms is desirable.
• Experience with AWS security services, Okta, CrowdStrike, Active Directory or Jira would be advantageous.

What's in it for me?

A hands-on Cyber Controls Engineer job where you'll build the integrations and automation behind a major cybersecurity controls monitoring capability. You'll have genuine ownership of the technology, working across cybersecurity, cloud, automation, APIs and data to help continuously prove that security controls are working.

We are an equal opportunities employer and welcome applications from all backgrounds. We are committed to creating an inclusive and supportive working environment where everyone is treated fairly, with dignity and respect. We value diversity and believe that different perspectives, experiences and backgrounds strengthen our organisation and the work we do.