Junior Security Engineer, Funding Circle

• Hands-on experience (e.g. 1+ years) in Information Security, with a demonstrable keen interest in AWS cloud security and application/product security
• Proven ability to learn technical concepts quickly and apply them effectively
• Hands-on experience with cloud platforms (AWS strongly preferred), including basic infrastructure and security concepts (e.g., IAM, VPC, Security Groups)
• Familiarity with core application security principles (e.g., understanding OWASP Top 10 vulnerabilities)
• Experience with or strong aptitude for learning security tools (e.g., Wiz, SAST, DAST, SCA, vulnerability scanners)
• Knowledge of or familiarity with Infrastructure as Code (IaC), particularly Terraform, is a plus
• Familiarity with container technologies (Docker, Kubernetes) is a bonus
• Good knowledge of relevant security frameworks and standards (e.g., NIST CSF, CIS Benchmarks, OWASP ASVS)
• Exposure and knowledge of the MITRE ATT&CK framework
• Strong communication skills, with the ability to articulate complex security concepts clearly to technical audiences
• Strong analytical and problem-solving skills with attention to detail

Desirable

• We are seeking an enthusiastic and motivated Junior Security Engineer to join our dynamic Security Team
• This is an excellent opportunity to kick-start or develop your career in cybersecurity within a fast-paced FinTech environment
• You will support our Cloud and Application Security initiatives, learning from experienced engineers and contributing to the protection of our platform and customer data
• You will assist in implementing security controls, supporting the secure software development lifecycle (SSDLC), helping to strengthen our security posture
• This role is ideal for someone passionate about security and eager to develop their skills in AWS, DevSecOps, and Application Security, quickly becoming a productive member of the team, taking ownership of specific security tasks and helping to implement robust security solutions in our fast-paced FinTech environment
• Support the implementation and adoption of secure software development lifecycle (SSDLC) practices and secure coding standards across engineering teams through collaboration, training, and tooling
• Assist with configuring, managing and monitoring automated security controls, tooling, and "security rails" within CI/CD pipelines to ensure secure and efficient deployments
• Collaborate closely with Cloud Platform Engineers, DevX and Product Engineering to ensure security requirements are integrated into system designs and technology choices from the outset
• Participate in threat modelling exercises for cloud-native applications, microservices, and infrastructure components
• Support internal and external penetration testing engagements for Funding Circle applications, services, and cloud infrastructure
• Contribute to vulnerability management processes, focusing on strategic remediation, root cause analysis, and preventative measures
• Assist in developing and implementing security automation across cloud infrastructure configuration, vulnerability management, and compliance monitoring
• Contribute to the implementation of robust security architectures, controls, and best practices within our AWS cloud environment
• Grow your expertise in cloud security (AWS), DevSecOps, and application security, becoming a key contributor in these areas
• Proactively identify areas for security improvement and contribute to security initiatives
• Proactively monitor the threat landscape, evaluate emerging cloud security risks and trends, and translate them into actionable security improvements