{"id":2350830,"url":"https://alion.io/job/cfc-senior-security-engineer","title":"Senior Security Engineer","company":{"id":703351,"name":"CFC","domain":"cfc.com","url":"https://alion.io/company/cfc-4","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":156000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false}],"status":"live","first_seen_at":"2026-10-11T13:49:43Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-24T00:17:12Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"At CFC, technology is at the heart of everything we do. We are looking for Senior Security Engineers to act as hands on problem-solvers and subject matter experts in their security and/or privacy domain, guide other people through complex issues, and lead continuous improvement of security governance, management and operations.\n\nThis is a lead individual contributor role able to both implement and verify automated controls in detection and response, identity and access, data protection, product security, or control assurance. The responsibilities below are a broad sample of security engineering across the information security function. You will be a specialist in a few and have a more general understanding and/or experience in the rest.\nAbout the role\nThis is a broad selection of responsibilities across the information security function at CFC. The specific role responsibilities will depend on the individual’s background and team’s mission.\nDiagnoses and refines successful and failed detections, alerts and security logs, including network and endpoint alerts, to ensure security logging and monitoring coverage meets the needs of CFC's business objectives and its technology and threat environments. \nLeads incident response operations and continuous improvement from investigation through containment and recovery, publishes incident reports with revised playbooks. \nDesigns and operates threat assessment services, including threat profiling and modelling and attack simulation, and records attack paths, threat intelligence and new requirements arising from assessments. \nDiagnoses complex chains of vulnerabilities or misconfigurations in software, application security tests, the build pipeline, malware defences, email and web protection, secure configuration or network infrastructure to root cause, and designs and implements controls to prevent recurrence. \nProduces expert guidance on the security design for a system and leads the security aspects of definitions of ready and done in projects. \nDiagnoses systemic contributing factors in conditional access, privileged access, device verification or the identity lifecycle failures, and implements the controls to prevent recurrence. \nClassifies sensitive data sets that have or will fail control coverage or effectiveness testing and implements the data protection controls to prevent recurrence, covering data loss prevention, encryption, privacy requests, insider detection and disposal. \nEvaluates control assurance, audit and continuous controls monitoring findings against the asset inventory, traces gaps, and updates standards and monitoring to prevent recurrence. \nBuilds integration templates, self-serve, deterministic and non-deterministic workflow automations and analytics for repeated security tasks and coaches teams on runbooks. \nLeads incident exercises, runs tabletops against the continuity plan, and coaches CFC colleagues through awareness training and behavioural nudges. \nExperience building and maturing security standards, workflows, guidance and operational controls.\nAbout you\n We are interested in engineers who have applied their specialist technical expertise at scale and speed. You will likely bring:\nProven experience in a technical security role, including security operations, threat detection and response, security engineering, cloud security, or application security within a fast-paced regulated organisation. \nStrong knowledge of CI/CD, cloud-native architecture, Infrastructure as Code and software supply-chain security. \nExperience leading threat modelling and resolving complex security and privacy design trade-offs. \nAbility to assess and deploy emerging data protection, AI and agentic engineering practices pragmatically and establish proportionate controls. \nAbility to influence senior technical and non-technical stakeholders through evidence, technical credibility and a pragmatic appreciation of both rigour and speed. \nPractice guiding engineers who are earlier in their career in the same domain, and coaching people through an exercise or a training session. \nKeen security mindset with excellent analytical and problem-solving skills, capable of assessing complex risks, identifying root causes, and delivering practical, threat and risk-informed solutions. \nCore Values\nLove what you do:\nWe show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.\nChallenge everything:\nWe’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.\nHave fun, be good:\nInsurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.","description_format":"text","description_chars":4852,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","InsurTech"],"lifecycle":[{"event":"open","at":"2026-10-12T13:49:43Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-23T06:21:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.815,"p_room":0.75,"age_days":11,"expected_fill_days":12,"reasons":["conf:0","velocity","win:late"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/cfc-senior-security-engineer","json_url":"https://alion.io/job/cfc-senior-security-engineer.json","meta":{"generated_at":"2026-10-24T03:18:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5178,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":703351},"rest":"https://alion.io/mcp/rest/get_company?id=703351"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcfc-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcfc-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcfc-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cfc-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcfc-senior-security-engineer"}]}