Workplace Security Engineer, Engine by Starling

• We are looking for engineers at all levels to join the team
• We value people being engaged and caring about customers, caring about the code they write and the contribution they can make to banking around the world
• People with a broad ability to apply themselves to a multitude of problems and challenges, who can work across teams do great things here at Engine, to continue changing banking for good
• Strong understanding of identity federation (SAML, OAuth, OpenID Connect, etc.)
• Experience with Identity and Access Management policy application and enforcement
• Strong understanding of standard corporate IT systems such as office networks, physical security systems, email and DNS configuration, file sharing systems, etc
• Experience designing, implementing, and managing IAM solutions
• Experience with Infrastructure as Code and infrastructure provisioning tools (Cloudformation, Terraform)
• Experience as an administrator of various enterprise SaaS applications
• Experience independently managing short and long term projects
• Experience with creating automations, using a scripting language like Python
• Good discipline with regard to the effective and safe testing and release of changes

Desirable

• Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be
• As a Workplace Security Engineer at Engine, you’ll be working on company-facing security, helping to keep our staff safe and productive and our systems secure and compliant
• You’ll be working on projects covering identity and access management, endpoint security, office infrastructure, data loss prevention, security hardening, compliance reviews, and more
• It’s a very varied role with lots of close interaction with the infrastructure, security engineering, cross cutting and compliance teams
• You will be responsible for safeguarding our systems, applications, and data by ensuring secure user access, authentication, and authorisation mechanisms are in place
• Manage IAM with Okta Identity Engine, create access control policies, ensure proper implementation of least privilege and RBAC across internal and SaaS applications
• Manage security within Google Workspace and our email security platform, including initiatives such as establishing a secure configuration posture validating against CIS Benchmarks
• Manage security controls across our MacOS estate, including MDM configuration profiles
• Wherever possible, deploy and manage systems with Infrastructure as Code and other automation to minimise configuration-by-clicking
• Work in a fast paced environment. We don’t release out-of-hours, we deploy during the day using safe methods that do not cause impact
• Perform regular security assessments and audits to identify risks and vulnerabilities, triage found risks appropriately, then design controls to implement as corrective actions
• Work with the compliance team to conduct third party SaaS security reviews and support other compliance initiatives such as SOC 2, ISO27001 and PCI-DSS
• Collaborate with infrastructure, security engineering, cross cutting and compliance teams on ongoing projects
• Lead incident response efforts, including investigation and remediation of security breaches
• Support our internal security awareness and training programs
• Spearhead workplace security initiatives, plan projects and track their progress
• Develop services for the future, automating and simplifying them, as well as making them more robust and secure using Infrastructure as Code where possible
• SaaS vendors constantly release new features - you will help to keep up and preferably stay ahead with our own feature requests to them
• Keeping abreast of new technologies and changes in the industry
• We provide a 24x7 global service. As a SME you might be called to help in exceptional circumstances

• Interviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you
• Our interviews are conversational and we want to get the best from you, so come with questions and be curious
• In general you can expect the below, following a chat with one of our Talent Team:
• Initial phone call - ~45 minutes
• Technical face to face - ~1.5 hours
• Final Interview ~45 minutes