Lead security engineering across enterprise networks, devices, cloud systems, identity, and access environments. Design reusable security architectures, automated governance controls, authentication and authorization models, privileged access controls, secrets management, and policy-as-code. Diagnose and remediate security weaknesses, lead threat modeling, implement scalable controls for human and non-human identities including AI agents, and advise technology teams on complex security architecture decisions.
Technology is at the heart of everything we do at CFC. We’re looking for a Lead Security Engineer to shape and deliver security across our networks, devices, identity and access environment.
This is a senior individual-contributor role for an engineer who combines strong technical judgement with sustained, hands-on delivery. You’ll solve complex, cross-functional security challenges, turning requirements and identified risks into practical, effective controls.
You’ll design how people, devices, services and non-human identities securely access our systems and data. Working across our technology teams, you’ll create reusable security architectures, implement and automate controls, diagnose weaknesses and ensure that security remains effective as our technology environment evolves.
At CFC, people are trusted to take ownership, challenge how things are done and deliver meaningful change. You’ll have the opportunity to influence security architecture across the business while working in an open, supportive and low-ego environment where ideas are welcomed
About the role
- Design, implement and operate highly automated security governance and controls across network, device, identity and access systems.
- Architect reusable security services for enterprise systems, integrating governance, protection, detection, response and recovery capabilities.
- Design and implement access controls for human and non-human identities, including service and agentic AI identities.
- Strengthen authentication, authorisation, secrets management, audit and privilege segmentation across systems and services.
- Implement scalable access-control models and access policy-as-code, enabling teams to provision access consistently and securely.
- Embed security governance and controls into code, cloud and AI architectures, including network segmentation and identity controls.
- Diagnose and remediate identity, infrastructure and access-control weaknesses, identifying root causes and implementing controls that prevent recurrence.
- Lead cross-functional security design and threat-modelling activities, translating risks into layered and prioritised engineering improvements.
- Automate security policies and guardrails across workflows and endpoints, including the appropriate use of AI augmentation.
- Act as a technical authority for network, device and identity security, advising technology teams on complex architecture and access-control decisions.
About you
We’re looking for an experienced security engineer who combines principal-level judgement with a practical, hands-on approach. You’ll bring:
- Deep experience designing and engineering security across enterprise networks, devices, identity and access.
- A strong understanding of network segmentation, identity controls and security architecture across cloud systems.
- Hands-on experience implementing identity and access management and privileged-access controls across enterprise identity platforms.
- Strong knowledge of authentication, authorisation, secrets management, audit, least privilege and privilege segmentation.
- Experience designing access for human and non-human identities, including addressing excessive permissions, exposed secrets and access-governance weaknesses.
- Experience implementing role-based or attribute-based access control, automated policy enforcement or access policy-as-code at scale.
- The ability to create effective security architectures and navigate trade-offs between security, accessibility, decentralisation and performance.
- The ability to automate controls through code, policy and workflow automation.
- Strong technical judgement, with the ability to influence cross-functional technology teams through clear and credible architectural reasoning.
You’ll enjoy taking ownership of complex problems, challenging established approaches and working collaboratively to make security effective by default. This is an opportunity to make a visible impact in a business that gives people the trust and responsibility to shape what comes next.
Core Values
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
About
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1200 staff and is trusted by more than 100,000 businesses across 90 countries.At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.Feeling like you need to tick every box before applying? We see things differently. In a rapidly scaling company like ours, ambition and the drive to learn count for more than a 'perfect' checklist. We're building the future of insurance, and that requires diverse talent eager to grow with us. If this role excites you and you're ready to make a significant impact, bring your unique background and let's build something great together.
CFC London, England Office
London, United Kingdom
Similar Jobs
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Own the full outbound B2B sales cycle for SMB and mid-market merchants, from prospecting and pipeline development through multi-product discovery, negotiation, and close. Build net-new business through cold outreach and strategic campaigns, manage complex multi-stakeholder deals, maintain accurate Salesforce forecasts, collaborate cross-functionally, and consistently achieve revenue targets.
Top Skills:
Salesforce
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Own the full outbound sales cycle for SMB and mid-market merchants, from prospecting through negotiation and close. Build pipeline through cold outreach and targeted campaigns, develop tailored multi-product solutions, conduct discovery and demos, manage complex deals, forecast accurately in Salesforce, and consistently exceed revenue targets. The role requires consultative B2B selling, net-new business development, strong negotiation skills, and experience with SaaS or fintech sales.
Top Skills:
Salesforce
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Provide incident handling, malware analysis, forensic investigation, remediation, detection engineering, and security automation across Windows, macOS, and Linux environments. Configure and optimize CrowdStrike Falcon modules, develop security content and automations, advise customers during incidents, produce technical findings, and support platform onboarding. The role also involves customer communication, thought leadership, operational improvement, and mentoring.
Top Skills:
.NetAi TechnologiesCC#Crowdstrike FalconDlpEdrFirewallsLinuxmacOSPerlPowershellPythonRuby On RailsSIEMVisual BasicWindows
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
