Connecting to LinkedIn...

W1siziisijiwmjevmdqvmtavmtmvndgvmjivymflm2zkntetowzlmc00nzi2lwe2zwytn2nkntizy2u2otg0l3yyx2jhbm5lcl9etumxlmpwzyjdlfsiccisinrodw1iiiwimjawmhg4mdbcdtawm2uixv0

Security Architect

Do you have security architectural skills across a range of subjects?  Are you able to apply a pragmatic approach whilst still ensuring mandatory requirements are met?

 

If you fit this profile, then we would love to hear from you as we are hiring for a Security Architect, known internally as a Security Design Engineer to join our Security Design team here at Direct Line Group.

 

Our vision is a world where insurance is personal, inclusive and a force for good. We help people carry on with their lives, giving them peace of mind now and in the future. We do that by providing amazing, evolving products and services that are just what people need. And amazing, evolving careers for people like you!

 

Who you’ll be working with:

You will sit within the Operational Resilience chapter and be aligned to one of DLGs Tribes, where you will play a key role in defining, maintaining, and ensuring the integrity and consistency of end to end solutions designed within squads.

 

As the face of Security to your business area ('tribe'), you will be charged with building relationships and ensuring security requirements are integrated into all squad changes and initiatives.

 

With over 10,000 employees and nearly 10 million customers, that’s a lot of information to keep safe. We have a huge range of technologies available, as well as the opportunity to work with a range of cross-functional experts in a dynamic and an ever-changing environment.

 

Working in our team might not be exactly like it is in action movies, but we do help protect the business from cyber-attacks.

 

Key responsibilities:

  • Acting as the primary interface to the business for the Security and Resilience CoE to your aligned tribe

  • Identifying and implementing new ways to automate and improve security across the business.

  • Communicating and designing secure designs, key recommendations and approaches to colleagues, project bodies and representing at relevant governance forums.

  • Analysing and researching security technologies to support the development of innovative solutions

  • Developing and maintaining relationships with relevant functions within the Security and Resilience CoE and wider DLG to ensure successful delivery of Information Security into the squads.

  • Creating and developing patterns and process documents which will be consumable for the entire organisation.  

  • Acting as a security evangelist and upskilling the tribe on security activities such as threat modelling.

 

Skills and Experience required:

  • Excellent communication and stakeholder management skills

  • Strong hands on technical, analytical, and problem-solving skills as well as experience of delivering within an agile environment

  • Experience of delivering services, defining architecture, and engaging with suppliers, in a complex outsourced environment

  • Breadth of knowledge across infrastructure, application, and network security including representation at Design Authorities.

  • Understanding of cloud deployments and associated security risks and controls

  • Experience of providing security advice and defining architecture for serverless and containerised environments

  • Knowledge of CI/CD pipelines and associated security considerations

  • Experience of implementing and carrying out threat modelling

  • Security certifications such as CISSP, CISM, GIAC or equivalent (working towards a certification is acceptable)

 

Ways of working

Here at Direct Line Group, we recognise the importance of flexibility, not only in our personal lives but also in the way we work. Our mixed model way of working offers a 'best of both worlds' approach combining the best parts of home and office-working, offering flexibility for everyone.
 

We’ve ditched the daily commute for a virtual first approach. If you do come into the office, there are exciting workspaces and zones you can use, depending on the type of work you are doing.

How much you’ll be in the office depends on your role, and we’ll consider the flexible working options that work best for you. Please get in touch with the team to discuss.