Junior Security Engineer

Description

Workplace: White City, London/ Leeds - Hybrid

Junior Security Engineer 

ITV is seeking a Junior Security Engineer to join our Cyber Security team. This hands-on role involves designing, building, operating, and maintaining in-house developed security services, as well as supporting the implementation of commercial tools. 

This role is ideal for individuals looking to contribute to the delivery and development of ITV's Cyber Security capabilities. We welcome applications from anyone with demonstrable experience in a modern technology stack and a keen interest in Cyber Security, who is eager to build their skills and focus long-term on security. 

This is an exciting opportunity to contribute to ITV's "More than TV" strategy and help secure some of the UK's most beloved content. 

The team

At ITV, our ambition is to be a digitally led company that delivers brilliant content to global audiences, available wherever, whenever, and however they choose. To achieve this, we need innovative thinking to provide highly agile, reliable, and scalable security solutions. Our goal is to embed security by design without compromise. 

This position is part of the Core Security Engineering team, a group of four engineers who collaborate closely with the Embedded Security Engineering team to meet business needs. 

The successful applicant will become familiar with various security tools. While professional training will be provided and tailored to the individual, we strongly believe in learning on the job. Strong communication skills are essential, as is the ability to collaborate effectively with all stakeholders. 

Responsibilities:

• Developing serverless functions using programming languages to interact with security services. 
• Creating event-driven architectures within AWS using infrastructure-as-code tools. 
• Responding to system failure notifications to identify and resolve issues for Security Engineering's developed services. 
• Integrating commercial security tooling into ITV's technology estate.
• Proactively identifying risks to cloud environments and implementing mitigations.
• Suggesting and identifying security improvements for technologies, processes, and new initiatives. 
• Contributing to the planning and strategy for delivering cyber awareness training and events across ITV.

Skills you’ll need (minimum criteria)

• Experience with cloud-native application best practices, including infrastructure-as-code. 
• Basic understanding of cloud security controls (e.g., IAM). 
• Knowledge of common security weaknesses in modern applications and their mitigations. 
• Ability to suggest pragmatic security controls. 

Other things we’re looking for (key criteria)

• Excellent communication skills, aligning with ITV's culture. 
• Ability to work independently and collaboratively, demonstrating inquisitiveness and initiative in problem-solving across the business.