Principal Security Engineer

We’re a digital insurance provider with ambitious plans to become The Best and Biggest in the UK market. Over the past few years, we've made significant investments in our data and tech capabilities, particularly within our CIO function. Our CIO team is at the forefront of driving innovation and ensuring our technology infrastructure supports our ambitious goals. We’ve nurtured our 4Cs culture, fostering collaboration, creativity, and continuous improvement.

We’re proud of the journey we’re on as a company and know that our continued success will rely on the contribution of our talented colleagues. The CIO team plays a crucial role in this journey, working on cutting-edge projects that enhance our digital presence and improve customer engagement.

We provide insurance to nearly four million customers, but we know there’s even bigger opportunity out there. The fact you’re now reading this job advert means we’ve tempted you to find out more about #lifeatHD – we really hope you like what you see, and you’ll join us to share in the success of the exciting chapter that lies ahead.

We understand some people may not apply for jobs unless they feel they tick every box. If you are excited about joining us and think you have some of what we are looking for, even if you’re not 100% sure, we would love to hear from you. Our CIO team is always looking for passionate individuals who are eager to make a difference and contribute to our success.

Job Details

• Promote a culture where we re-use more which allows us to optimise workflow efficiency and reduce duplication.
• Guide and coach teams on good security engineering practices and process improvements, helping to build capability and maturity across the organisation.
• Provide leadership and line management to Security Engineers, including performance management, coaching, mentoring and supporting career development.
• Build, develop and maintain a high-performing team, fostering a collaborative and inclusive culture that supports continuous learning and growth.
• Support the team in delivering outcomes efficiently by reducing manual execution and driving automation wherever possible.
• Ensure fast, reliable feedback loops are in place to enable fail-fast delivery and continuous improvement.
• Define and implement best practices and controls, ensuring adherence and enabling early detection of issues.
• Drive engagement and collaboration across Scrum Teams and the CIO community, leading the definition and adoption of best practices to enable faster, secure and more reliable delivery.
• Manage team priorities, resource allocation and capacity planning to ensure successful delivery of security initiatives and business objectives.

Skills we would love you to have

• Proven line management experience within a Cyber Security, Information Security or Technology function.
• Extensive practical experience in IT Security working in an agile environment.
• Transformational leadership skills, with the ability to influence decision-making and implement new processes and procedures in support of the company's vision.
• Excellent mentoring, coaching and people management skills, with a track record of developing high-performing technical teams and supporting direct reports in their ongoing development.
• Experience conducting performance reviews, setting objectives and supporting career progression for technical professionals.
• Proven experience in designing, implementing and securing cloud environments, with a strong emphasis on Microsoft Azure services.
• In-depth knowledge of cloud security best practices, network security, identity and access management, encryption and secure coding principles.
• Excellent problem-solving skills and the ability to analyse complex security issues and develop effective solutions.
• Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams.
• Track record of successfully designing, building and deploying scalable, secure and highly available security infrastructures using Azure.
• Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions.

Tools & Technologies:

• Proficient knowledge of at least one agile methodology (e.g. Scrum, Kanban, SAFe). Familiar with backlog and test case management in a system of record such as Jira or Octane.
• Expert knowledge using Cloud Technologies.
• Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements.
• Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture.
• Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process.
• Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools and SIEM platforms.
• In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Application Gateways, Proxies, M365, EDR and KQL.
• Expertise in utilising Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code.

Unfortunately, we are unable to progress with candidates that require sponsorship at this time

What we offer

Join us and you’ll find a different way of doing things. We call it the 4Cs. We focus on getting it right for our colleagues, customers, company, and community. As one of our colleagues, you’ll be helping to drive our growth, so in return, we’ll give you all the support, training and development you need. Not to mention plenty of recognition and rewards, and the scope to voice your ideas and put them into practice.

Reward 

Salary – Attractive salary based on experience + car allowance (pay reviews also completed each year) 

Flexible Working – We champion a flexible and hybrid working approach so please speak to your recruiter to discuss in more detail, including days in the office and at home.   

Competitive Bonus Scheme - All colleagues are eligible for our annual 4Cs performance bonus, which is usually paid in March. The scheme is based on Hastings’ performance against our business goals and your own personal performance. 

Physical Wellbeing – as a Band 4 colleague, Hastings pay for you to receive private medical Insurance (also known as PMI) This gives you flexibility and convenience to see a specialist or consultant and allows you to decide when and where you will be seen. 

Financial Wellbeing – As well as providing you with 4x your salary with our life assurance cover and income protection at no extra cost, pension contribution match up to 10%, we are proud to provide you with an AWARD WINNING package which includes – discounts and cashback at everyday retailers and on our own products, fee free independent mortgage advice, and free access to financial wellbeing support. 

Mental Wellbeing programme – At Hastings Direct we understand that mental health cannot not be scheduled, that’s why we have a range of support to help you keep yourself well. We have the thrive mental health app, our colleague assistance programme available 24/7, our own, in-house mental health first aiders, support groups and a dedicated team to make sure we are covering your needs 

There's more! – 27 days annual leave + bank holidays, with the option to buy or sell one of your contracted weeks, access to our health care cash back plans, dental plans, discounted health assessments, Cycle to work and tech schemes, discounted and free onsite facilities, social events throughout the year and much more …. 

Our 4Cs principles are simple: we believe by creating the right culture for our colleagues and giving them the right tools to do their job, we’ll deliver good outcomes for every customer, helping us to grow the company profitably and sustainably and allowing us to invest in the communities we serve.

We deliver good outcomes for our customers every time by providing great products at the right price with our simple and straightforward service. We treat customers like we want to be treated - fairly, respectfully and with their best interests at heart.