Staff Security Engineer

• Set security engineering direction across diverse and strategically important Group functions
• Lead complex programs of work and influence senior business and technology leaders
• Combine deep technical expertise with enterprise-scale architecture and security leadership.

Group Security is part of Technology and brings together security and resilience capabilities spanning cyber security, protective security and business resilience, fraud technology and operations, and cyber defence. The team's purpose is safeguarding a brighter future for all. We secure the bank, protect customers, build recovery capability for challenging events and create an admired place to work, while delivering best-in-class security outcomes through governance, protection, detection, response and recovery. You will join the Group Security Engineering team, operating within a Secure by Design and DevSecOps model. In this role, you will:

• Set technical direction for complex security engineering and architecture outcomes across multiple functions
• Lead significant programs of work with security, engineering, architecture, risk and business peers
• Provide authoritative security advice at senior business and technology forums
• Influence General Managers, Executive General Managers and technology leaders through clear, risk-informed recommendations
• Lead complex architecture reviews, threat assessments and security control decisions
• Modern AI architectures and threats affecting generative AI, large language models and agentic systems, or demonstrated ability to build expertise rapidly in emerging technology domains.
• Securing AI, machine learning or data platforms, including AI gateways, runtime protection or security monitoring.
• Provide technical leadership and mentorship to security engineers and practitioners, raising engineering capability and consistency across the function
• Guide enterprise security solutions, including endpoint detection and response, security information and event management, and observability capabilities
• Define reusable patterns, guardrails and practices that improve security outcomes at scale

You are an established technical leader who can move confidently between detailed engineering discussions, enterprise architecture decisions and executive forums. You influence through expertise, credibility and collaboration, and you take end-to-end ownership of difficult security outcomes. You will bring:

• Deep experience across security engineering, security architecture and technical risk in large-scale, distributed enterprise environments
• A track record of leading complex, cross-functional security programs and influencing outcomes beyond a single team or domain
• Strong expertise in Secure by Design, threat modelling, control design and pragmatic risk-based decision-making
• Advanced familiarity with artificial intelligence security, DevSecOps, cloud security and secure software or infrastructure delivery
• Experience shaping or deploying enterprise capabilities such as endpoint detection and response, security information and event management and observability platforms
• Executive stakeholder skills, including experience presenting complex technical matters to senior business and technology leaders