Senior Cyber Controls Engineer

Salary: £70,000 - 85,000 per year

Requirements:

• A solid understanding of cybersecurity controls and frameworks, particularly NIST CSF
• Strong hands-on engineering experience building API integrations, connectors and automated processes
• Good scripting experience with Python, PowerShell or similar
• Experience with CI/CD tooling such as Jenkins or GitHub Actions
• Knowledge of ISO 27001, SOX and PCI-DSS is beneficial
• Experience with GRC, Cyber Controls Monitoring or security assurance platforms is desirable
• Experience with AWS security services, Okta, CrowdStrike, Active Directory or Jira would be advantageous

Responsibilities:

• Design, build and maintain integrations between our Cyber Controls Monitoring platform and enterprise technology systems
• Use APIs, existing connectors and custom-built integrations to pull security and control evidence from source systems
• Build automated processes that test cybersecurity controls and identify failures, gaps and downward trends
• Develop and maintain data pipelines that extract, normalise and securely transfer control evidence
• Use Python and PowerShell to build automation and integration processes
• Use Jenkins, GitHub Actions or similar CI/CD tooling to deploy and maintain integrations and platform configurations
• Integrate with technologies such as Okta, CrowdStrike, Active Directory, Jira and AWS security services
• Work with cybersecurity, engineering, risk and GRC teams to understand what evidence is required to demonstrate that controls are operating effectively
• Help develop reporting and BI integrations that provide visibility of control health and maturity

Technologies:

• API
• AWS
• Active Directory
• CI/CD
• Cloud
• GitHub
• JIRA
• Jenkins
• PowerShell
• Python
• Security
• DevOps

More:

We are hiring for a hands-on Senior Cyber Controls Engineer role at the heart of a major cybersecurity controls monitoring programme. This UK hybrid position focuses on building the technology that automatically checks whether cybersecurity controls are working, replacing manual point-in-time testing with continuous monitoring. You will have genuine ownership of the technology, working across cybersecurity, cloud, automation, APIs and data to help continuously prove that security controls are effective. We are an equal opportunities employer and welcome applications from all backgrounds. We are committed to creating an inclusive and supportive working environment where everyone is treated fairly, with dignity and respect. We value diversity and believe different perspectives, experiences and backgrounds strengthen our organisation and the work we do.

last updated 37 week of 2026