{"id":1901599,"url":"https://alion.io/job/cfc-lead-security-engineer","title":"Lead Security Engineer (Access)","company":{"id":703351,"name":"CFC","domain":"cfc.com","url":"https://alion.io/company/cfc-4","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":94000,"max_usd":168000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":25},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Least Privilege","optional":false}],"status":"live","first_seen_at":"2026-10-04T11:24:22Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-23T10:27:56Z","board_verified":true,"closed_at":null,"days_open":18,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":18},"description":"Technology is at the heart of everything we do at CFC. We’re looking for a Lead Security Engineer to shape and deliver security across our networks, devices, identity and access environment.\nThis is a senior individual-contributor role for an engineer who combines strong technical judgement with sustained, hands-on delivery. You’ll solve complex, cross-functional security challenges, turning requirements and identified risks into practical, effective controls.\nYou’ll design how people, devices, services and non-human identities securely access our systems and data. Working across our technology teams, you’ll create reusable security architectures, implement and automate controls, diagnose weaknesses and ensure that security remains effective as our technology environment evolves.\nAt CFC, people are trusted to take ownership, challenge how things are done and deliver meaningful change. You’ll have the opportunity to influence security architecture across the business while working in an open, supportive and low-ego environment where ideas are welcomed\nAbout the role\nDesign, implement and operate highly automated security governance and controls across network, device, identity and access systems.\nArchitect reusable security services for enterprise systems, integrating governance, protection, detection, response and recovery capabilities.\nDesign and implement access controls for human and non-human identities, including service and agentic AI identities.\nStrengthen authentication, authorisation, secrets management, audit and privilege segmentation across systems and services.\nImplement scalable access-control models and access policy-as-code, enabling teams to provision access consistently and securely.\nEmbed security governance and controls into code, cloud and AI architectures, including network segmentation and identity controls.\nDiagnose and remediate identity, infrastructure and access-control weaknesses, identifying root causes and implementing controls that prevent recurrence.\nLead cross-functional security design and threat-modelling activities, translating risks into layered and prioritised engineering improvements.\nAutomate security policies and guardrails across workflows and endpoints, including the appropriate use of AI augmentation.\nAct as a technical authority for network, device and identity security, advising technology teams on complex architecture and access-control decisions.\nAbout you\nWe’re looking for an experienced security engineer who combines principal-level judgement with a practical, hands-on approach. You’ll bring:\nDeep experience designing and engineering security across enterprise networks, devices, identity and access.\nA strong understanding of network segmentation, identity controls and security architecture across cloud systems.\nHands-on experience implementing identity and access management and privileged-access controls across enterprise identity platforms.\nStrong knowledge of authentication, authorisation, secrets management, audit, least privilege and privilege segmentation.\nExperience designing access for human and non-human identities, including addressing excessive permissions, exposed secrets and access-governance weaknesses.\nExperience implementing role-based or attribute-based access control, automated policy enforcement or access policy-as-code at scale.\nThe ability to create effective security architectures and navigate trade-offs between security, accessibility, decentralisation and performance.\nThe ability to automate controls through code, policy and workflow automation.\nStrong technical judgement, with the ability to influence cross-functional technology teams through clear and credible architectural reasoning.\nYou’ll enjoy taking ownership of complex problems, challenging established approaches and working collaboratively to make security effective by default. This is an opportunity to make a visible impact in a business that gives people the trust and responsibility to shape what comes next.\nCore Values\nLove what you do:\nWe show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.\nChallenge everything:\nWe’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.\nHave fun, be good:\nInsurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.","description_format":"text","description_chars":4573,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","InsurTech"],"lifecycle":[{"event":"open","at":"2026-10-05T11:24:22Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-23T06:21:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":1,"p_active":0.708,"p_room":0.45,"age_days":18,"expected_fill_days":12,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/cfc-lead-security-engineer","json_url":"https://alion.io/job/cfc-lead-security-engineer.json","meta":{"generated_at":"2026-10-23T11:00:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16737,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":703351},"rest":"https://alion.io/mcp/rest/get_company?id=703351"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcfc-lead-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcfc-lead-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcfc-lead-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cfc-lead-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcfc-lead-security-engineer"}]}