Attack Surface Operations Engineer - E2

The defence of the Society and its members data and money is of critical importance. The Attack Surface Operations team has been created as a new, central function to assess, understand, and manage the threats across our technology landscape.

At Nationwide we offer hybrid working wherever possible. More rewarding relationships are supported through our hybrid approach, bringing colleagues together across our UK wide estate, whilst also supporting generous access to home working. We value our time in the office to solve problems, to learn, and to feel connected.

For this job you'll spend at least two days per week, or if part time you'll spend 40% of your working time, at one of our offices. If your application is successful, your hiring manager will provide further details on how this works. You can also find out more about our approach to hybrid working here.

If we receive a high volume of relevant applications, we may close the advert earlier than the advertised date, so please apply as soon as you can.

What you’ll be doing

Our Attack Surface Operations team is a newly established team that will create an innovative and cutting edge new capability within the Security & Resilience department focussed on managing and reducing our internal and external Attack Surface against a constantly evolving threat – and in identifying and executing targeted interventions that shift the dial to provide the most reduction in residual risk.  

Attack Surface Operations is about applying a threat lens to Attack Surface information with dedicated ringfenced resource to proactively identify vulnerabilities and weaknesses, and fix issues that have the greatest impact on reducing our risk exposure. 

We want our Attack Surface Operations team to grow and foster deep technical expertise in understanding how to securely configure and maintain technology, and in how attackers can exploit organisations Attack Surface to gain access.  

In this role as a junior engineer in Attack Surface Operations you will form part of the core engineering capability at the heart of this function, making sure our tooling and reporting are performing optimally as well as working with our consumers to help them understand and improve their security posture. 

Working in partnership with the wider Security & Resilience function, you will: 

• Ensure that we have up to date understanding and maps of our Attack Surface for both internal and externally facing assets  
• Contribute to the prioritisation of remediation through applying the latest threat information. 
• Participate in deep dive analysis of existing security enforcement technologies ensuring that our configuration is optimal. 
• Work with our technology and business teams to advise, and support them, on implementing remediation actions, including by providing in-depth technical implementation advice 
• Ensure our scanning capabilities have the coverage required and can detect the latest vulnerabilities and threats. 
• Work closely with our other Cyber Security teams to enhance their processes and capabilities by bringing an understanding of our Attack Surface  
• In addition, you will: 
• Build a network with other areas within Nationwide to promote and share knowledge about Attack Surface Operations. 
• Identify and drive improvement initiatives in our operational processes and in response to new threats. 
• Deliver timely, repeatable, and actionable reporting. 

About you

As a minimum, you’ll

• Have hands on experience of vulnerability management practices and techniques.
• Have knowledge of securing Microsoft or UNIX or networks technologies to industry good practice standards.
• Have working knowledge of the principals of Attack Surface mapping and remediation..
• Have working knowledge of other Security domains such as Security Operations and Access Management
• Be ready to build good working relationships with both technical and business stakeholders, gaining their respect and trust based on your knowledge and professionalism
• Have excellent communication and interpersonal skills, both written and verbal
• Have the ability and desire to quickly learn new technologies.
• Have a strong understanding of risk management processes and techniques.

Experience and knowledge of the following areas would be beneficial:

• Previous experience of working in a Security Operations or Engineering role.
• Security threat modelling
• Experience of data visualisation tooling such as Power BI
• Agile ways of working
• Scheme and regulatory environments such as PCI DSS and GDPR

Our Customer First behaviours are all about putting customers and members at the heart of how we work together. You can strengthen your application by showing the behaviours that resonate with you, and how you might have already demonstrated these.

• Say it straight - This is about being honest and direct with good intent and saying what needs to be said in the room. It’s also about being clear, precise, and using language that we and, importantly, our customers and members can understand.
• Push for better - This is about aiming high and constantly looking for better in how we work together and serve our customers and members.
• Get it done - This is about prioritising what will have the greatest impact, being decisive and taking accountability for delivering on the end-to-end outcome.

We know applying for jobs can sometimes feel like you’re sending an application into a black hole. We review each application individually. So, it’s a good idea to call out your most relevant experience on your application to give yourself the best chance.

The extras you’ll get

There are all sorts of employee benefits available at Nationwide, including:

• A personal pension – if you put in 7% of your salary, we’ll top up by a further 16%
• Up to 2 days of paid volunteering a year
• Life assurance worth 8x your salary
• A great selection of additional benefits through our salary sacrifice scheme
• Gympass – Access to a range of free and paid options for health and wellness.
• Access to an annual performance related bonus
• Access to training to help you develop and progress your career
• 25 days holiday pro rata

What makes us different

Nationwide is the world’s largest building society. With over 15 million customers, we have a relationship with almost a quarter of the UK’s population. We’ve got the scale to compete with the big banks, but we’re not a bank.  
 
As a building society, we’re owned by our members – that’s our customers who have their current account, mortgage or savings with us. It means we can do things differently to deliver our Purpose – Banking – but fairer, more rewarding, and for the good of society.  
 
When you work at Nationwide, you can experience that difference for yourself. You’ll be part of a high-performing, purpose-driven organisation that offers rewarding career experiences and a highly competitive range of benefits to match. You’ll also be joining us at an important time as we seek to reach more and more people in the UK. We want everyone in the UK to know that they don’t have to bank with a bank. They can choose a modern mutual instead.  

What to do next

If this role is for you, please click the ‘Apply Now’ button. You’ll need to attach your up-to-date CV and answer a few quick questions for us.

We respond to everyone, so we will be in contact shortly after the closing date to let you know the outcome of your application.

#LI-Post