The Role
Senior individual contributor responsible for designing security observability, automating control monitoring and evidence collection, embedding security controls across cloud platforms, conducting security reviews, improving event monitoring and exposure management, and building security metrics and policy guardrails.
Summary Generated by Built In
At CFC, technology is at the heart of everything we do. As a market leader in cyber insurance and a business built on innovation, we’re looking for a Staff Security Engineer to play a critical role in evolving our security capabilities and driving measurable risk reduction across our global technology estate.
This is a senior individual contributor opportunity for an engineer who enjoys solving complex security challenges at scale. You’ll work across engineering, data, AI and digital workplace teams to build security observability, automate control assurance and influence how security is embedded into products, platforms and processes.
If you're passionate about turning security data into actionable insight, building elegant automation and raising the security maturity of a fast-moving technology organisation, we'd love to hear from you.
About the role
- Designing and building security observability capabilities that provide meaningful visibility across systems, infrastructure and applications
- Developing automated control monitoring, evidence collection and continuous testing solutions that strengthen security governance
- Partnering with engineering, data and technology teams to embed effective security controls into products and platforms
- Driving improvements in security event monitoring, exposure management and alerting capabilities
- Conducting security reviews of new products, services and technology initiatives
- Building meaningful security metrics and reporting that support informed decision-making
- Supporting the evolution of security policies, standards and technical guardrails through automation and measurable outcomes
- Contributing to access governance and security control assurance activities across both human and non-human identities
Acting as a technical leader and trusted security advisor, helping raise standards across the wider technology organisation
About you
We're interested in hearing from engineers who combine strong technical depth with a practical, collaborative approach to security.
You'll likely bring:
- A strong background in security engineering, information security, governance, risk or compliance
- Experience building security controls and automated security solutions within modern cloud environments
- Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms
- Experience working with APIs, automation, scripting and infrastructure-as-code technologies
- Familiarity with cloud platforms including Azure, AWS or GCP
- An understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls
- Experience operating in regulated environments and working with security and data protection requirements
- Excellent communication skills and the ability to influence stakeholders across technical and non-technical teams
Core Values
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
About
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1200 staff and is trusted by more than 100,000 businesses across 90 countries.At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.Feeling like you need to tick every box before applying? We see things differently. In a rapidly scaling company like ours, ambition and the drive to learn count for more than a 'perfect' checklist. We're building the future of insurance, and that requires diverse talent eager to grow with us. If this role excites you and you're ready to make a significant impact, bring your unique background and let's build something great together.
Skills Required
- Background in security engineering, information security, governance, risk or compliance
- Experience building security controls and automated security solutions in modern cloud environments
- Knowledge of security technologies such as SIEM, vulnerability management, data protection, endpoint security or exposure management platforms
- Experience working with APIs, automation, scripting and infrastructure-as-code
- Familiarity with cloud platforms including Azure, AWS or GCP
- Understanding of security frameworks and control standards such as ISO 27001, SOC 2 and CIS Controls
- Experience operating in regulated environments and working with security and data protection requirements
- Excellent communication skills and ability to influence technical and non-technical stakeholders
CFC Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about CFC and has not been reviewed or approved by CFC.
-
Strong & Reliable Incentives — Variable pay is positioned as a core part of total compensation, with a group‑wide annual bonus highlighted as a consistent feature. Expanding employee share ownership is described as enhancing overall rewards alongside bonuses.
-
Healthcare Strength — Private medical insurance is provided, complemented by dental and optical cashback and a 24/7 employee assistance programme. These elements indicate comprehensive health coverage beyond standard medical plans.
-
Leave & Time Off Breadth — Time away provisions include 25 days of holiday and paid volunteer time, signaling a broad approach to time off. Additional practices such as company social events support overall work–life rhythm, though they are not leave per se.
CFC Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
CFC is a specialist insurance provider, pioneer in emerging risk and market leader in cyber. Their global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today’s most critical business risks.
