Senior Security Engineer - CIAM XDP

Description

You will join the bank's Identity Services team as a Senior Security Engineer, based in London.

The role builds and maintains security solutions that protect the bank's systems, sensitive information and digital identity platform, which covers millions of customer identities across global banking operations.

You will work where security and identity meet, use AI-assisted development and security tools, and partner with engineering, product and compliance colleagues to build security in from the start. The team is collaborative and inventive.

The bank works to the values of Respect, Integrity, Service, Excellence and Stewardship, and expects colleagues to Empower, Challenge and Drive.

Responsibilities

• Act as the go-to expert on security systems and engineering patterns.
• Design, build and maintain protocols, algorithms and software that protect sensitive data and systems.
• Manage secrets so they are generated, stored and used securely.
• Audit the bank's infrastructure and software to find and assess vulnerabilities, and help respond to suspected breaches.
• Research new cryptographic technologies and techniques and drive their adoption.
• Work with developers and security teams so cryptographic solutions meet business goals, security policy and regulation.
• Build, deliver and maintain IAM solutions and systems.
• Set or contribute to strategy, define requirements and recommend changes.
• Plan resources, budgets and policies, maintain policies and processes, drive continuous improvement and escalate breaches of policy or procedure.
• If you manage a team, define roles and responsibilities, plan the department's future needs, counsel staff on performance and take part in pay decisions. Lead as a People Leader using the four LEAD behaviours: Listen and be authentic, Energise and inspire, Align across the enterprise, Develop others.
• As an individual contributor, be the subject matter expert in your discipline, guide technical direction, lead multi-year collaborative assignments, bring in other specialists where needed, and train and coach less experienced specialists. Provide input on long term profits, organisational risk and strategic decisions.
• Advise functional leadership and senior management on the impact and alignment of work across functions.
• Assess and mitigate risk to support the control and governance agenda, and show leadership and accountability for risk and controls in your team's work.
• Understand how the organisation functions and keep up with business activity and strategy through business-aligned areas.
• Apply sharp analysis to compare complex options, define problems and build original solutions, drawing on in-depth research.
• Build trusted relationships with internal and external stakeholders, using influence and negotiation to reach key business objectives.

Requirements

• Solid security engineering experience, with deep IAM expertise in authentication protocols, authorisation frameworks and identity federation security.
• Strong knowledge of OAuth2, OIDC, SAML, PKI and PSD2 SCA.
• Proven skill in threat modelling, security architecture reviews, penetration testing and vulnerability assessments for IAM systems and APIs.
• Experience with AWS security services and cloud security practice, including IAM policies, security groups, encryption, HSMs and key management.
• Solid grasp of secure coding, security testing automation and CI/CD pipeline integration.
• Plus: hands-on experience securing Ping Identity platforms (PingGateway, PingAM, PingIDM).
• Highly desirable: experience with AI-assisted security scanning tools and automated security testing frameworks.
• Highly desirable: background in incident response, security monitoring and building threat detection for identity-related threats.
• Highly desirable: security certifications such as CISSP, CEH, OSCP or equivalent.
• Highly desirable: experience in financial services or regulated industries, with knowledge of PCI-DSS, ISO 27001 and SOC 2.
• Highly desirable: strong stakeholder management, with the ability to explain security risks and recommendations to technical and non-technical audiences.
• Ideally a 70/30 profile: 70% hands-on security engineering, 30% leadership and managerial mindset or potential.
• You may be assessed on risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, and job-specific technical skills.

Conditions

Based in the London office.