Cyber Security Engineer
Financial Times
About us
The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy, with a mission to deliver quality information and services worldwide.
At the FT, curiosity thrives and ambitious thinking is rewarded. Here, you’re given the chance to reach millions, create work that matters and deliver impartial journalism in a polarised world.
In our warm, collaborative culture, you’ll connect with a diverse community of experts who support your growth, career aspirations and wellbeing.
Your future at the FT will be filled with opportunities that challenge and inspire you. With no fixed path, you’ll discover new skills and forge a career that can take you anywhere.
Build a newsworthy career at the FT.
Our commitment to diversity, equity and inclusion
We believe in the power of unique perspectives and want all voices in our organisation to be heard, respected and valued. A supportive workplace is one where employees feel they can be themselves and operate to their full potential. We are committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups.
About the role:
We’re looking for a Cyber Security Engineer to help improve application security across the FT’s cloud-native technology estate. This is a hands-on role focused on making secure engineering easier for product, platform and software engineering teams.
Application security experience is essential for this role. You’ll help improve developer-friendly security guardrails across GitHub-based CI/CD pipelines, application repositories and engineering workflows. This includes working with SAST, software composition analysis, secret scanning, vulnerability management and secure coding guidance so that security findings are clear, actionable and owned by the right teams.
You’ll work closely with engineers to support practical threat modelling, triage application vulnerabilities, improve security playbooks and help teams remediate issues in a pragmatic way. You do not need to be a deep AWS or cloud security specialist, but some exposure to AWS, cloud security or infrastructure-as-code security would be useful.
We’re looking for someone with practical AppSec experience who wants to grow their impact - someone who enjoys working with engineers, improving tooling and helping security become part of normal delivery rather than a last-minute checkpoint.
What you’ll bring to the role
Application security experience: practical experience identifying, explaining and helping remediate application security risks in modern engineering environments.
Developer-friendly security mindset: you enjoy working with engineers, explaining risks clearly and helping teams adopt secure practices without unnecessary friction.
Vulnerability management experience: experience triaging and tracking application vulnerabilities from sources such as SAST, dependency scanning, secret scanning, penetration tests, bug bounty reports or third-party advisories.
CI/CD and code security awareness: familiarity with security tooling in development workflows, such as SAST, software composition analysis, secret scanning or repository security controls.
Threat modelling awareness: experience participating in, supporting or facilitating lightweight threat-modelling sessions for applications, services or new features.
Automation mindset: ability to write scripts or small tools, ideally in Python, to reduce manual effort, improve visibility or make security workflows easier.
Cloud security awareness: Some exposure to AWS, cloud security or infrastructure-as-code security would be useful, but is not essential.
Growth mindset: willingness to keep developing across application security, cloud security, secure development and modern engineering practices.
Required Experience, Essential
- Practical experience in application security.
- Experience working with software engineers to explain and remediate security issues.
- Familiarity with common web application security risks and secure coding practices.
- Experience with vulnerability triage, prioritisation and remediation tracking.
- Experience using or interpreting findings from tools such as SAST, software composition analysis, secret scanning or similar.
- Experience participating in or supporting threat-modelling activities.
- Ability to write scripts or small tools, ideally in Python, to automate tasks or improve visibility.
- Strong communication and collaboration skills.
- Familiarity with Agile or Scrum ways of working.
Desirable
- Exposure to AWS security, cloud security or infrastructure-as-code security.
- Experience with Terraform or CloudFormation.
- Experience with container or Kubernetes security.
- Experience with bug bounty, penetration testing or security testing programmes.
- Experience with Splunk or similar logging/SIEM platforms.
- Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks.
- Experience building dashboards, metrics or reports to support vulnerability management.
- Relevant security certifications or training, such as AWS security training, secure coding training, GIAC, ISC2, CREST or equivalent practical experience.
Accessibility
We are a disability confident employer and Valuable 500 signatory.
Please let us know if you require any reasonable adjustments/personalisation as part of the application process or to enable you to attend an interview. If you would like to discuss your requirements or have any questions, email View email address on job-boards.eu.greenhouse.io and a member of our team will be happy to help.
Further information
At the FT, we embrace innovation and the use of technology and appreciate that individuals may leverage AI tools as part of their job application process. Whilst we are happy for you to use AI to assist with your application, it is essential that all information provided is authentic and accurately represents your skills, experience, and qualifications.
Candidates should be aware that the use of AI throughout the application process may be monitored to ensure a fair and transparent hiring process for all.
Please beware of fraudulent job postings and offers claiming to be from the Financial Times. All legitimate opportunities will direct you to apply through the official Financial Times careers site, and the FT will never ask for financial information, payments, or referrals to third parties during the hiring process. If you have any concerns about the legitimacy of a job posting or suspect any scam activity, please contact View email address on job-boards.eu.greenhouse.io .
Interested in the FT but don’t see the right role yet? Join our Talent Community to receive exclusive updates, featured jobs, and insights into working at the FT.
- ..., with a focus on addressing those faced by underrepresented groups. About the role: We’re looking for a Senior Cyber Security Engineer to help mature application and cloud security across the FT’s cloud-native, AWS-hosted technology estate. This role has an...
- ...You will play a key role in keeping Axi colleagues safe in the world of Cyber. With a key focus on engineering and automation, this role focuses on implementing strategic solutions to security problems, providing a secure environment for our customers and colleagues...
3000 Php
...focus of this role is to bolster Auctane's global engineering and operations within the Information Security Group. This position reports directly to the CISO and... ...business. Being part of the internal Infosec / cyber security incident process - investigate suspected attacks...- ...including the majority of Fortune 100 companies to manage, accelerate, and secure their software delivery from code to production. We're looking for an Application Security Research Engineer to join a team of researchers and ethical hackers focused on offensive security...
- ...Philippines Reports To: Director of Information Technology Position Overview We are looking for an experienced Senior Security Engineer to join our remote team from the Philippines. This role sits at the core of our security operations and compliance posture...
- ...Internal Job Title:Cloud Security Engineer Work setup: Weoperatein a hybrid work environment, and we encourage applicants who are open to working in the officetwo days a weekto apply. Workschedule:8am-4pm UK time, 3pm-11pm PH time Employment type: Permanent...
- ...Kroll’s Cyber Risk team helps organizations respond to and prepare for cyber incidents across some of the most complex and high‑profile... ...matters Develop hands‑on experience across multiple cyber security disciplines Why this role is a great start Hands‑on from...
- ...This is a remote position. SUMMARY Seeking a highly skilled Senior Network & Security Engineer with strong experience in enterprise networking and security within an MSP environment. The ideal candidate will be responsible for designing, implementing, supporting...
- ...Point Infinity External Risk Management, otherwise known as Cyberint, continuously reduces external cyber risk by managing and mitigating an array of external cyber security threats with one unified solution. We are looking for a Cyber Threat Intelligence Support...
- ...prestigious University of Cambridge. We are looking for a Security Analyst to join our Global Security Operations Centre (SOC) in... ...Lead, you will help defend our network infrastructure against cyber threats. Your responsibilities will include: ~Monitor system...
- ...organization proudly affiliated with the prestigious University of Cambridge. We are recruiting for an experienced Senior Workday Engineer to join our expandingWorkday HCM Technical Delivery Team. This role supports us in delivering an ambitious roadmap of Workday...
- ...is the Kroll’s difference. Kroll’s Security Operation’s Center helps firm manage cybersecurity... ...equivalent in Computer Science, Systems Engineering, Cybersecurity, Information Technology,... ...4 years of monitoring experience in Cyber Security Operations Center. Excellent...
- Worksetup: We operate in a hybrid work environment, and we encourage applicants who are open to working in the office two days a week to apply. Workschedule: 15:00 to 23:00 Manila time, with flexibility during major incidents or to support shifting schedules. Employment...
- ...This is a remote position. Ensure security, compliance, and risk management across cloud environments. Key Responsibilities Implement cloud security frameworks Ensure compliance with SOC 2, ISO 27001, etc. Conduct vulnerability assessments...
- ...organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation. Our prevention-first... ...in a nutshell No two days for a Check Point Security Engineer (Presales) are the same, from getting hands on with the...
- ...organization proudly affiliated with the prestigious University of Cambridge. We are seeking a technically accomplished Senior Security Analyst to join our Manila-based team at Cambridge University Press & Assessment, aligned to UK working hours. In this role, you...
- ...organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation. Our prevention-first... ...analysis. Escalate unresolved or complex cases to Tier 3 Engineering or R&D teams with detailed findings and replication steps...
- ...possibilities with Cambridge University Press & Assessment, a distinguished global academic publisher and assessment organization proudly affiliated with the prestigious University of Cambridge. We are seeking a technically accomplished Senior Security Analyst to...
- ...candidates for this role ** About the Role We're looking for an experienced Finance Content Writer with deep knowledge of securities regulations and financial markets. This is not a general finance writing role. You'll create authoritative, compliant, and...
- ...This is a remote position. We are seeking a highly organized and dependable Security Administrator Intern to manage user access, credentials, and routine security operations across various business systems. The ideal candidate will have strong attention to detail...
- ...offer you the ultimate career opportunity that will light a fire within you. So, what’s the role all about? The Information Security Analyst sits at the intersection of security, sales, and technical account managers serving as a point of contact for customer and...
- ...This is a remote position. My Amazon Guy is looking for an experienced Automation Security Specialist to join our team! In this role, you will be responsible for optimizing and modernizing existing automation workflows in Zapier. A key focus will be transitioning...
- ...information and industry-leading technology. As a DevOps & Database Engineer at Rimes, you will play a dual role in managing cloud... ...infrastructure, ensuring high availability, scalability, and security. Design, implement, and maintain CI/CD pipelines in Azure DevOps...
- ...As an Engineering Manager , you'll lead a team of 8-12 software engineers while driving predictable, high‑quality delivery. You'll combine... ...conversations, champion best practices, and ensure quality, security, and reliability standards are upheld. Requirements...Remote job
- ...JOB SUMMARY Manages all engineering/maintenance operations, including maintaining the building, grounds and physical plant with particular attention towards safety, security and asset protection. Accountable for managing the budget, capital expenditure projects,...
- ...Role Overview As the Safety & Security Associate, you are the frontline protector and operational anchor of our restaurant. This is a unique, associate-level role that blends physical security, high-level customer service, and technical facility care. Beyond traditional...
- ...Job Title: Fullstack Java Engineer Location: Makati, Philippines We are partnering with a leading fintech company looking to hire... ...), React, or jQuery. Experience with Spring (MVC, Boot, Security, Batch), Hibernate, and REST/SOAP web services (JPA, JAX-RS, JSON...
- ...complex decision-making. We are seeking a high-performing Data Engineer to help build and scale the data infrastructure that powers analytics... ...Cloud architecture principles: compute, storage, networks, security, cost Ability to develop REST APIs, Python SDKs or Libraries...
- ...Role Description Package and distribute of Packages and Security Patches/Hotfixes via JAMF Pro Prepare and deliver JAMF Pro SLA and saturation reports for internal management. Maintain and improve documentation relating to the JSS administration processes and...
- ...service management company, is searching for a Technical Support Engineer II to join their project in the Philippines. Position Title:... ...’s team boasts some of the most talented and experienced cyber security and data center experts in the field. They are always looking...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Cyber Security Engineer. Be the first to apply!
