Workplace: London or Leeds. Expectation is 1-2 days a week in the office.
ITV is seeking a Junior Security Engineer to join its Cyber Security team. This hands-on role involves designing, building, operating, and maintaining in-house developed security services, as well as supporting the implementation of commercial tools.
The Security Engineering team provides expert consultancy to other engineering teams, ensuring the development of secure cloud-based applications. This position is part of the Core Security Engineering team, a group of four engineers who collaborate closely with the Embedded Security Engineering team to meet business needs.
This is an exciting opportunity to contribute to ITV’s “More than TV” strategy and help secure some of the UK’s most beloved content.

WHAT THE ROLE INVOLVES:

• Developing serverless functions using programming languages to interact with security services.
• Creating event-driven architectures within AWS using infrastructure-as-code tools.
• Responding to system failure notifications to identify and resolve issues for Security Engineering’s developed services.
• Integrating commercial security tooling into ITV’s technology estate.
• Proactively identifying risks to cloud environments and implementing mitigations.
• Suggesting and identifying security improvements for technologies, processes, and new initiatives.
• Contributing to the planning and strategy for delivering cyber awareness training and events across ITV.
  At ITV, our ambition is to be a digitally led company that delivers brilliant content to global audiences, available wherever, whenever, and however they choose.
  To achieve this, we need innovative thinking to provide highly agile, reliable, and scalable security solutions. Our goal is to embed security by design without compromise.
  This role is ideal for individuals looking to contribute to the delivery and development of ITV’s Cyber Security capabilities. We welcome applications from anyone with demonstrable experience in a modern technology stack and a keen interest in Cyber Security, who is eager to build their skills and focus on long-term security.
  The successful applicant will become familiar with various security tools. While professional training will be provided and tailored to the individual, we strongly believe in learning on the job. Strong communication skills are essential, as is the ability to collaborate effectively with all stakeholders.
  To be considered for this opportunity you will need to demonstrate the following skills:

MINIMUM ROLE CRITERIA:

• Experience with cloud-native application best practices, including infrastructure-as-code.
• Basic understanding of cloud security controls (e.g., IAM).
• Knowledge of common security weaknesses in modern applications and their mitigations.
• Ability to suggest pragmatic security controls.
• Ability to work independently and collaboratively, demonstrating inquisitiveness and initiative in problem-solving across the business.