CFC

Cyber risk underwriting through MGA platform

Lead Security Engineer - Access

Security Engineering & ArchitectureUpdated on Nov 13

Full-timeLondon, UKNo salary listedHybrid

About the Job

Requirements

Deep experience designing and engineering security across enterprise networks, devices, identity and access.
A strong understanding of network segmentation, identity controls and security architecture across cloud systems.
Hands-on experience implementing identity and access management and privileged-access controls across enterprise identity platforms.
Strong knowledge of authentication, authorisation, secrets management, audit, least privilege and privilege segmentation.
Experience designing access for human and non-human identities, including addressing excessive permissions, exposed secrets and access-governance weaknesses.
Experience implementing role-based or attribute-based access control, automated policy enforcement or access policy-as-code at scale.
The ability to create effective security architectures and navigate trade-offs between security, accessibility, decentralisation and performance.
The ability to automate controls through code, policy and workflow automation.
Strong technical judgement, with the ability to influence cross-functional technology teams through clear and credible architectural reasoning.

Responsibilities

Design, implement and operate highly automated security governance and controls across network, device, identity and access systems.
Architect reusable security services for enterprise systems, integrating governance, protection, detection, response and recovery capabilities.
Design and implement access controls for human and non-human identities, including service and agentic AI identities.
Strengthen authentication, authorisation, secrets management, audit and privilege segmentation across systems and services.
Implement scalable access-control models and access policy-as-code, enabling teams to provision access consistently and securely.
Embed security governance and controls into code, cloud and AI architectures, including network segmentation and identity controls.
Diagnose and remediate identity, infrastructure and access-control weaknesses, identifying root causes and implementing controls that prevent recurrence.
Lead cross-functional security design and threat-modelling activities, translating risks into layered and prioritised engineering improvements.
Automate security policies and guardrails across workflows and endpoints, including the appropriate use of AI augmentation.
Act as a technical authority for network, device and identity security, advising technology teams on complex architecture and access-control decisions.

Technology is at the heart of everything we do at CFC. We’re looking for a Lead Security Engineer to shape and deliver security across our networks, devices, identity and access environment.

This is a senior individual-contributor role for an engineer who combines strong technical judgement with sustained, hands-on delivery. You’ll solve complex, cross-functional security challenges, turning requirements and identified risks into practical, effective controls.

You’ll design how people, devices, services and non-human identities securely access our systems and data. Working across our technology teams, you’ll create reusable security architectures, implement and automate controls, diagnose weaknesses and ensure that security remains effective as our technology environment evolves.

At CFC, people are trusted to take ownership, challenge how things are done and deliver meaningful change. You’ll have the opportunity to influence security architecture across the business while working in an open, supportive and low-ego environment where ideas are welcomed

Design, implement and operate highly automated security governance and controls across network, device, identity and access systems.
Architect reusable security services for enterprise systems, integrating governance, protection, detection, response and recovery capabilities.
Design and implement access controls for human and non-human identities, including service and agentic AI identities.
Strengthen authentication, authorisation, secrets management, audit and privilege segmentation across systems and services.
Implement scalable access-control models and access policy-as-code, enabling teams to provision access consistently and securely.
Embed security governance and controls into code, cloud and AI architectures, including network segmentation and identity controls.
Diagnose and remediate identity, infrastructure and access-control weaknesses, identifying root causes and implementing controls that prevent recurrence.
Lead cross-functional security design and threat-modelling activities, translating risks into layered and prioritised engineering improvements.
Automate security policies and guardrails across workflows and endpoints, including the appropriate use of AI augmentation.
Act as a technical authority for network, device and identity security, advising technology teams on complex architecture and access-control decisions.

We’re looking for an experienced security engineer who combines principal-level judgement with a practical, hands-on approach. You’ll bring:

Deep experience designing and engineering security across enterprise networks, devices, identity and access.
A strong understanding of network segmentation, identity controls and security architecture across cloud systems.
Hands-on experience implementing identity and access management and privileged-access controls across enterprise identity platforms.
Strong knowledge of authentication, authorisation, secrets management, audit, least privilege and privilege segmentation.
Experience designing access for human and non-human identities, including addressing excessive permissions, exposed secrets and access-governance weaknesses.
Experience implementing role-based or attribute-based access control, automated policy enforcement or access policy-as-code at scale.
The ability to create effective security architectures and navigate trade-offs between security, accessibility, decentralisation and performance.
The ability to automate controls through code, policy and workflow automation.
Strong technical judgement, with the ability to influence cross-functional technology teams through clear and credible architectural reasoning.

You’ll enjoy taking ownership of complex problems, challenging established approaches and working collaboratively to make security effective by default. This is an opportunity to make a visible impact in a business that gives people the trust and responsibility to shape what comes next.

About the Company

CFC

Cyber risk underwriting through MGA platform

CFC Underwriting is a specialist insurance provider operating as a managing general agent (MGA) that underwrites on behalf of a panel of carriers, focusing on emerging and specialty risks with a strong emphasis on cyber. It uses a proprietary global insurance platform powered by data science to streamline underwriting across a portfolio of 50+ products, including cyber and professional liability, with an in-house incident response team adding comprehensive cyber risk management. It differentiates itself through its early focus on cyber, large in-house claims and incident response capabilities, and a global broker-driven distribution model. Its goal is to deliver fast, precise underwriting and robust risk management for technology-related and other specialty risks worldwide.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: London, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at CFC

See more jobs