Cloud Security Architect

Company Description

Here at esure, we’re no strangers to change. As one of the industry leaders in the insurance business, striving to become a world class digital insurer, we’re getting ready for more. It’s creating great new opportunities for innovative and talented industry professionals to join us at a pivotal point in our development.

Job Description

We have an outstanding chance for someone to join our team as a Cloud Security Architect, where you'll play a crucial role in crafting our security landscape.

Join forces with diverse teams, including security, architecture, engineering, and DevOps, to champion best security practices. You'll be the go-to person for Information Security Architecture, actively contributing to the development of innovative Cloud Security best practices.

As a collaborative force, you'll evaluate and enhance security designs across teams, ensuring alignment with frameworks.

• Contribute to strategic development of Cloud security practices for both Run and Change.
• Collaborate with Architecture, Engineering, DevOps colleagues and squads to review design documents and advocate security best practice.
• Build and maintain Cloud Security Architecture patterns and reference architecture patterns. Where applicable; map to MITRE ATT&CK and MS Kubernetes threat matrix.
• Continually review and extend Cloud Security Playbooks and preventative controls
• Collaborate with internal DevSecOps and DevOps squads and help provide guidance around adopting security by design
• Support the development of our security operations for monitoring, testing and, where vital, conduct Cloud implementation review audits.
• Where appropriate, you may be required to support the Incident Response team.

Qualifications

What we’d love to see:

• A continual passion to learn and inspire, setting a good example across the business
• You will need to have a good background in Cloud Security Architecture and DevOps practices
• Experience working with cloud platforms, particularly AWS services (EC2, EKS(K8), VPC, ELB, S3, RDS, WAF,
• Lambda, SNS, ELK, etc.)
• Thread modelling techniques and aware of common threats and
• implementation failings
• Experience of API integration and Security techniques
• Knowledge of AuthN/AuthZ protocols, such as OpenID Connect, OAuth, SAML and AD
• CISSP or equivalent qualification

Bonus points if you have any of the below:

• Kubernetes(K8) / Microservices experience
• Experience of risk modelling concepts (e.g. STRIDE/DREAD)
• Awaremess of threat matrix for Kubernetes and of MITRE ATT&CK
• Knowledge of security automation tooling to facilitate CI/CD
• Application(L7) Security knowledge
• You may have experience with application security tooling (SAST, DAST)
• Ability to read and understand code/scripts (e.g. Python, Terraform)
• Awareness of vulnerability management and penetration testing tools

We are committed to continual learning; at esure you will be supported to grow in missing disciplines:

• AWS Architect / AWS Security Specialist
• (ISC)² CCSP or (SANS) Cloud Security Architect SEC545
• Privacy by design CIPP/E or CIPT

Additional Information

This is your opportunity to shape our game-changing journey and be part of something truly special! And to top it off, here are some perks to life at esure…

• A competitive salary that recognises your skills and potential
• A bonus scheme that celebrates your contribution to esure’s success
• Discounts on our insurance products, for you and your family
• 25 days annual leave, plus 8 flex days to be taken as and when suits you
• Benefits just for you: our hub – My Benefits Box – is loaded with perks to choose from, so you can build a personal toolkit to support your health, wellbeing, lifestyle, and finances.
• Grow your career with us: whatever your goals, we’ll support you with hands-on training, mentoring, a LinkedIn Learning licence, access to our exclusive Academies, regular career conversations, and expert partner resources from the likes of Women in Data and Women in Tech.
• Join our communities: our networks give you the chance to connect, learn and share with like-minded colleagues across the business – for work and play. So, it’s no surprise our people consistently rate ‘making friends at work’ one of the highest scorers in our colleague engagement survey
• More flexibility for you: we’re a proud supporter of the ABI’s Make Flexible Work campaign and welcome you to ask about the flexibility you need, whether it’s part time, job sharing, or compressed hours. Our hybrid working approach also puts you in the driving seat of how and where you do your best work.
• Live a healthy lifestyle: we offer lots of support, so you feel like the best version of yourself – like specialist advice through our employee assistance programme, wellbeing classes, access to the My Health Advantage app, our Big Team Challenge, and learning sessions on topics like menopause.
• A helping hand to do your bit for a greener and safer world: driving good in the world couldn’t be more important to us. That’s why we encourage colleagues to use volunteering days to support their local communities and have lots of initiatives to help you live a greener lifestyle.
• Everyday appreciation: praise from your colleagues means the world! Our social recognition tool makes it easy to give colleagues the praise they deserve, and you could even be shortlisted for a company-wide ACE Award.

We understand some people may not apply for jobs unless they tick every box. If you are excited about joining us and think you have some of what we are looking for, even if you’re not 100% sure we would love to hear from you.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.