Senior Engineer, Cybersecurity

Hybrid working, London/Edinburgh

Blis is an award-winning global leader and technology innovator in big data analytics and advertising. We help brands such as McDonald's, Samsung and Mercedes-Benz understand and reach their best audiences. We're industry champions for the ethical use of data, and we believe people should have control over their data and privacy. With offices across four continents and over 300 people, we're a truly international company with a global culture and scale — and as part of T-Mobile Advertising Solutions, we now pair that with the reach and resources of a major global group.

This role protects Blis's cloud platform and the data it processes, through the most significant change in the company's technical history.

It's a hands-on cloud security engineering role with a strong automation bias: a small team covers a large estate, and that works because the routine work is automated. You'll have real autonomy over how security is delivered on the Blis estate, with a substantial parent security organisation to plug into rather than a blank page to fill.

Our platform runs mainly on Google Cloud Platform, with some AWS. It includes customer-facing web applications, public APIs serving server-to-server traffic from partner systems, and data pipelines processing many terabytes daily, all delivered through a comprehensive CI/CD pipeline. You'll sit in our DevSecOps team and work across the full product lifecycle, so that security is built in from the start.

Success looks like a measurably stronger security posture, faster detection and response, a clean and well-documented integration into T-Mobile, and decisions made with data in close partnership with engineering and the wider business.

Job Family: Cybersecurity Engineering

Management Level: Individual Contributor - IC

JOB SUMMARY

This role is essential for protecting digital assets and maintaining the integrity of cybersecurity infrastructure within the organization. It involves developing and implementing security strategies, tools, and technologies to defend against cyber threats and vulnerabilities. The role is distinguished by its focus on proactive risk identification and deployment of mitigation measures to safeguard systems and data. Success is measured by the effectiveness of security improvements and alignment with organizational goals and regulatory requirements. The work enhances organizational resilience to cyber incidents and supports overall security posture for internal and external stakeholders.

MAIN RESPONSIBILITIES (Approximate Percent of Time)

• Develops and implements advanced security strategies, tools, and technologies to protect against cyber threats and vulnerabilities (25%)

• Identifies proactively security risks and deploys effective mitigation measures to safeguard the company's systems and data (20%)

• Collaborates with various IT and business teams to align cybersecurity measures with organizational goals and regulatory requirements (15%)

• Enhances the company's resilience to cyber incidents through expertise and dedicated cybersecurity practices (15%)

• Maintains the integrity of cybersecurity infrastructure by monitoring and upgrading security systems as needed (10%)

• Conducts regular security assessments and audits to ensure compliance with internal and external standards (5%)

• Participates in other duties or projects as assigned by business management as needed (10%)

QUALIFICATIONS

Required Minimum Qualifications

• Education: Bachelor's Degree plus 5 years of related work experience OR Advanced degree with 3 years of related experience (Required)

• Acceptable areas of study include Computer Science or Information Technology (Required)

Additional Qualifications: Experience (all Preferred)

• 4-7 years: Experience with security related software and/or business process design

• 4-7 years: Experience in technical project management and leading cross-functional solution design teams

• 4-7 years: Expertise in network information security, including Firewall policy design, SSL Certificate management, and vulnerability analysis mitigation

Skills (all Required)

• Artificial Intelligence (AI)

• Cybersecurity

• Escalation Management

• Security Automation

• Security Engineering

• Security Incident Management

• Security Technologies

• Security Testing

• Stakeholder Management

• Threat Modeling

Licenses and Certifications (all Preferred)

• CISSP: An advanced-level certification for IT pros serious about careers in information security. Offered by (ISC)², CISSP is designed to prove expertise in designing, implementing, and managing a best-in-class cybersecurity program.

• CISM: Offered by ISACA, this certification is for management-focused IT professionals who are responsible for developing, managing, and overseeing information security systems in enterprise-level applications, or for developing best organizational security practices.

• CRISC: Also provided by ISACA, CRISC is aimed at IT professionals, project managers, and others whose job it is to identify and manage risks to IT and the business.