Security Engineer

Company: ITV
Apply for the Security Engineer
Location: London
Job Description:

Overview

As Security Engineer you will embed security expertise within ITV’s product teams to promote secure development and align with the Core Security Engineering group. You will influence cloud security, implement automated security controls, and help design and operate in-house cyber security services. The role supports the rollout of security tooling (SIEM, SAST, CNAPP) and drives cyber awareness across the organization. Working across ITV’s devolved teams, you will shape secure-by-design solutions for the streaming platform.

Pay / Benefits

  • Flexible working
  • Generous holiday allowance
  • Annual bonus opportunity
  • Competitive pension contribution
  • Save as you earn – ITV shares
  • Wellbeing and volunteering days

Responsibilities

  • Develop serverless functions with code to automate processes
  • Create event-driven AWS architectures using infrastructure-as-code
  • Provide security expertise and act as the single point of contact for product teams and Cyber Security
  • Maintain alignment with Core Security Engineering to relay requirements and sustain bespoke in-house services
  • Support implementation of security tooling such as SIEM, SAST, and CNAPP
  • Identify and mitigate risks in cloud environments pro-actively
  • Suggest security improvements for technologies, processes, and new initiatives
  • Contribute to cyber awareness training and events strategy

Key requirements

  • Cloud security controls knowledge (e.g., IAM)
  • Up-to-date understanding of common security weaknesses and mitigations
  • Ability to pragmatically introduce security controls
  • Strong communication and stakeholder engagement skills
  • Autonomy and initiative in problem-solving across the business
  • Experience developing cloud-native applications using IaC best practices
  • Strong communication
  • Autonomy and initiative
  • Stakeholder collaboration
  • Cloud security (IAM) in cloud environments
  • Security weaknesses and mitigations in modern environments
  • Infrastructure as code and cloud-native development

…

Posted: October 8th, 2026