Staff Security Engineer (Data Specialist)

Role OVO-View

Salary banding: £72,000 - £95,000

Experience: Expert

Working pattern: Full-Time

Reporting to: Principal Security Engineer, Security Controls Assurance

Sponsorship: Unfortunately we are unable to offer sponsorship for this role.

This role in 3 words: Amazing Security Insights

Top 3 qualities for this role: Creative, Adaptable, Technical

 

Where you’ll work:

Depending on the needs of your business area, we expect hub based people to be in the office at least once a week, and to go to OVO Connection events in-person. 

You’ll be assigned to the closest one of our three hub offices, Bristol, Glasgow, or London; unless your role requires field-based work. Each hub has accessible spaces to park your laptop, is designed to inspire people, help them connect and bring big ideas to life.

 

Everyone belongs at OVO:

At OVO, we are on a mission to solve one of humanity's biggest challenges, the climate crisis. And we know it takes all of us to change the world. That's why we need diverse people from all abilities, gender identities, ethnicities, ages, sexual orientations, life experiences and backgrounds to join us.

 

Teamworking for the planet:

Everything we do here spins around Plan Zero. So, naturally, the team you’ll be joining plays a gigantic role in making that happen. Here’s how:

We’re hiring creators and challengers who deliver high-impact, well-engineered solutions. Every role we’re hiring puts people at the heart of our security strategy and uses technology and operational processes to build a resilient and performant business. The Path to Zero is paved with secure technology!

 

This role in a nutshell:

As a Staff Security Engineer - Security Data Specialist, you will work closely with fellow security engineers to design, build, and deploy data solutions that drive organisation-wide security value. Your solutions will enable product and service owners, engineering teams including security engineers to proactively identify hidden problems and patterns in data and use these insights to amplify weaknesses and drive improvements to coding hygiene and system architecture.  This is a great opportunity for someone who is motivated to use data to drive security improvements, and best practices across a business with wide-ranging impact, and loves working in collaborative, and supportive environments.

 

Your key outcomes will be:

• Help architect, design, and deploy new features, and functionality in a unified OVO security data platform to enable security engineers to optimise and automate cyber defence, attack surface and security controls assurance processes.
• Stay up-to-date with the latest security data and AI trends, tools, and technologies to ensure the team’s technical approach is innovative.
• Foster an inclusive team environment where everyone feels valued and excited to contribute.
• Communicate optimally with collaborators to explain concepts and drive informed decision making.

Within your first 3 months month you’ll:

• Gain a comprehensive understanding of our existing security data sources, data pipelines, warehouse, and security operations principles.
• Contribute to the development and enhancing of our security data and AI model architectures 
• Guide and educate other teams about effective security data and AI practices and opportunities.

Systems: Google Cloud Platform services, GitHub, Looker, Wiz, Google SecOps, Crowdstrike

 

You’ll be a successful Staff Security Engineer - Security Data Specialist at OVO if you …

• Data automation and AI-enablement: Designs and implements robust automation and AI augmentation frameworks and tools (e.g. for threat detection, security finding and incident remediation and risk operations). Automates security playbooks , policies and guardrails in workflows, CI/CD and/or the IDE.
  
  
• Secure development: Create and deliver automated assurance mechanisms against technical security guidance and configurations. Build and implement security audit points in digital services. Monitor secure coding and infrastructure patterns, automate policy enforcement and enable teams for secure provisioning. 
  
  
• Decision support and behaviour change: Strategically design security decision-making experiences and measure their impact. Use statistical analysis and human-centered design principles to build an