Information Security Engineer

at  Rightmove

INFORMATION SECURITY ENGINEER

As the UK’s favourite property platform, Rightmove aims to give everyone the belief that they can make their move. To help us achieve this, we’re looking for an Information Security Engineer to join our team and lead the charge in cyber defense at Rightmove.
Are you a cybersecurity expert with a proactive mindset and a passion for safeguarding complex IT environments? As one of the most technically experienced members of the IT Security Team, you’ll work closely with the CISO and Security Operations Managers to maintain, develop, and elevate our in-house Security Operations Centre (SOC), ensuring robust defenses across all Rightmove applications and assets.

• Strengthen Security Standards: Partner with the CISO to advance Rightmove’s IT security standards, balancing security and usability across our systems.
• Collaborate Across Teams: Work with development teams to rigorously test applications and public-facing assets, ensuring vulnerabilities are identified, prioritised, and mitigated.
• Enhance Threat Hunting: Lead threat-hunting efforts to identify and address potential security risks, contributing to the growth and development of our Threat Hunting services.
• Incident Response: Head full-scale incident investigations, managing documentation and participating in post-incident reviews to continuously improve response capabilities.
• Lead & Mentor: Guide junior analysts, foster knowledge-sharing, and develop internal security skills within the team.
• Risk Management: Help shape Rightmove’s security risk appetite, guiding stakeholders and communicating complex technical issues to non-technical audiences.
• Cloud & Infrastructure Security: Establish top-tier security standards for our cloud environments, working closely with website and corporate IT teams to ensure a unified approach to security.
• Proactive Monitoring & Response: Stay ahead of emerging threats, conduct EDR alert triage, and coordinate incident response across a variety of cybersecurity alert levels.
• Continual Improvement: Collaborate with external partners on penetration testing, build internal tools, and enhance incident response playbooks.