Описание
Join us as a Senior Security Engineer for Identity Services at Barclays, where you will be instrumental in securing our digital identity platform and protecting millions of customer identities across our global banking operations. You'll work at the intersection of security and identity, leveraging AI-assisted development and security tools, while partnering with engineering, product, and compliance teams to embed security-first principles into every aspect of our Identity Services capability and fostering a collaborative and innovative team culture.
Задачи
•Provision of subject matter expertise on security systems and engineering patterns.
•Development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems.
•Management and protection of secrets, ensuring that they are securely generated, stored, and used.
•Execution of audits to monitor, identify and assess vulnerabilities in the bank's infrastructure/software and support the response to potential security breaches.
•Identification of advancements to support the innovation and adoption of new cryptographic technologies and techniques.
•Collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements.
•Development/implementation and maintenance of Identity and Access Management solutions and systems.
Требования
•Solid experience in security engineering with deep expertise in Identity and Access Management security, including authentication protocols, authorisation frameworks, and identity federation security.
•Strong knowledge of security protocols and standards including OAuth2, OIDC, SAML, PKI, and PSD2 SCA.
•Proven expertise in threat modelling, security architecture reviews, penetration testing, and vulnerability assessments specifically for IAM systems and APIs.
•Experience with AWS security services and cloud security best practices, including IAM policies, security groups, encryption, HSMs, and key management.
•Solid understanding of secure coding practices, security testing automation, and integration with CI/CD pipelines.
•Ideally 70/30 with 70% of hands-on security engineering expertise, with a 30% leadership and managerial mindset or potential.
Будет плюсом
•Hands-on experience securing Ping Identity platforms (PingGateway, PingAM, PingIDM) is a plus.
•Experience in using AI-assisted security scanning tools and automated security testing frameworks.
•Background in incident response, security monitoring, and building threat detection capabilities for identity-related threats.
•Security certifications such as CISSP, CEH, OSCP, or equivalent demonstrating deep security expertise.
•Experience in financial services or regulated industries with understanding of compliance frameworks (PCI-DSS, ISO 27001, SOC 2).
•Strong stakeholder management skills with ability to communicate security risks and recommendations to technical and non-technical audiences.
Условия
Условий в вакансии нет.
