Financial Times
Cyber Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Engineer
Cyber Security Engineer at The Financial Times
About the Financial Times
The Financial Times is one of the world’s leading news organisations, globally recognised for its authority, integrity and accuracy. Our mission is to deliver quality information and services worldwide through journalism that matters.
Rethinking how we work here
- Curiosity thrives.
- Ambitious thinking is rewarded.
- Warm, collaborative culture supports career growth, wellbeing, and new skills.
- No fixed path—engineer a career that takes you anywhere.
A future built on inclusion We believe diverse perspectives create stronger work. All voices should be respected here.
- We actively remove barriers to ensure employees can flourish.
- A supportive workplace means feeling authentically yourself.
🚀 Job Overview: Cyber Security Engineer
Join us to strengthen application security across The Financial Times’ cloud-native tech estate. This hands-on role focuses on making security part of engineering, not an afterthought—helping builders push code more confidently and securely.
Key Components of the Role: ✅ Reinforcing security guardrails in GitHub-based CI/CD pipelines, app repositories, and workflows. ✅ Collaborating with engineering teams (product, cloud, DevOps) to embed security without friction. ✅ Practical threat modelling – solving problems, improving playbooks, and driving fast remediation. ✅ Bridge the gap between DevSecOps and “devs-first” security culture.
We value an application security specialist who enjoys building, coaching, and curating improvements (not just reacting to incidents). Cloud expertise is useful but not required.
⭐ Who You Are
Core Responsibilities (Lived Experience Expected)
- Application security hands-on: Identifying, explaining, and remediating risks."
- Developer advocacy: Translate security complexities into pragmatic guidance for engineers.
- Vulnerability management:
- Triage application issues from SAST, dependency/scanning, secret leaks, penetration tests, or public advisories.
- Prioritise, track, and drive fixes with product teams.
- Threat modelling facilitator:
- Conduct lightweight sessions so developers fix issues early.
- Document and refine exercise templates for reuse.
- Automation: Script simple tools (Python preferred) to reduce manual drudgery in tooling or workloads.
- Tooling mentor: Work with engineers to adopt better practices (e.g., secure coding, supply chain hygiene).
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Skills & Mindset
Required
- Hands-on appsec knowledge:
- Modern web/vuln risks (erg., OWASP Top 10).
- Secure coding principles (regular language, frameworks).
- Direct interaction with developers ("how do we make this work?").
- Vuln triage & pipeline security:
- SAST/dependency/security scanners in CI.
- Tickets in tooling (e.g., GitHub advisorydb, Azure Policies).
- Collaborative process awareness:
- Must thrive in sprints or agile ceremonies.
- Change-resistant? Not for you.
Nice-to-Haves
- Cloud/AWS provocations:
- Exposure to IAM, Blacklists, EC2/C2/S3/container/secrets security.
- Infrastructure-as-code depth: Diving into misconfigs, fate management.
- Test rigs: Penetration-testing, bug-bounty hunting, or monitors Beware of pulled advisories.
- Practices favorite tools: Splunk/the SIEM stack, sprint backlogs, or dashboards showcasing risk reduction.
- Cats? Adoption? Title
⚡ Perk Good Past?
- DO or advanced (GitHub) Secure Coding or AWS/OWASP/Bright materials are notes encouraging participation.
🤝 What We Value
📊 Must-Dos
- Insanely driven to blend security with delivery.
- Clear communicator, whether technical refrains.
- Traded" rocks: Never switch roles, never hilble at craftsmen.
- Growth mindset: Deserves hats around best practice gaps.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Just Couldn’t Miss
- Tops: Security’s onboard by default – not patch-checks in havde washes.
- Unshakable: "Zero trust". Prove it with how you talk as well as tools.
🤴 Why This Matters to You
Flexibility
FT embraces supported hybrid: 2 days/onsite, subject to role ēcscrutiny Service flexibility? We be sure it shapes well. .tails. Reserves right to modify access.
You Count Through Success
- Culture flourishes through heads: mental health online expected & ongoing.
- Gloxiniae all new here, and we welcome good ideas.
Financial Times Perks
Global Office Benefits
- Subsidised medical cover (including mom/dadhood paths)
- Duty tuckle GP meetings
- 30 days’ paid holiday (and 9 days function ps!)
- Gym/sports &’ subtended lunch
- Interactive community
Note: Terms by local rules apply. See FT Benefits Centre.
🔄 Fair Energy in Action
We’re an 'accessible’ explore
- signing the Value 500 pledge to unlocking disabled applicants. St/Support: If giving useful adjustments becomes part of your application or interviews process? We spend a point in if you’ve embedded Race or Disability Framework. Email talent@ft.com your thoughts, questions, and accessibility requirements.
🚀 Why This Is More Than a Job
Our promise: Stronger security minutesfor confidence and scalability so you need to battle the evil.
Take our hand on tooling and process - your future with FT is the shared, challenging, and impactful. Build it.
Cashing Note: AI friends all! Whilst our AI don’t make any predictions. Resumes after all, must be whole ones (so no AI-cloudwashing).
Let’s move forward: Apply now at FT Careers → “Cyber Security Engineer”
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location