Senior Cloud Engineer

Who we are

Since 1843, The Economist Group has championed independence, excellence and openness, helping people understand and tackle the critical challenges shaping the world. Today, we are building on that legacy as a global media and information-services company powered by digital innovation, analytical rigour and evidence-based insight.

Across our three businesses - The Economist, Economist Enterprise and Economist Education - we deliver trusted analysis and insights to individuals and organisations in more than 170 countries. United by a shared purpose to drive progress, we empower decision-makers to make sense of change and chart a course through an increasingly complex world.

As a colleague, you will be part of a culture that values ideas, encourages ownership and holds itself to high standards. We invest in people who are curious, thoughtful and adaptable, whether they are launching new products, reporting on global events or harnessing emerging technologies such as AI to improve how we work. Here, fresh thinking is taken seriously, ambition is matched by integrity, and great work is recognised. Working across disciplines, geographies and perspectives, we are united by a commitment to innovation, excellence and creating meaningful impact.

Want to discover more about life at The Economist Group? Follow @EconomistCareers on Instagram to discover the people, stories and opportunities that make TEG unique.

This role is the collective glue that holds the information security program together.

We are looking for a highly motivated engineer responsible for designing, implementing, managing, monitoring and upgrading an organisation’s cybersecurity measures. At The Economist Group we have four business units specialised in editorial publications, impact think-tank, data forecasting, and distributed professional education. Our web and mobile applications allow customers to get the latest critical insights which drive global decisions. As a Cybersecurity Engineer for The Economist Group you will be expected to protect organisational systems and networks from cyber threats by responding to security breaches, testing and identifying vulnerabilities and communicating their security findings to managerial-level executives in an organisation.

What You’ll Do

Responsibilities:

• Support teams to implement, identify and advance security at the Economist
• Conduct pen tests and risk assessments to prioritise threats and compare mitigation strategies.
• Work with Economist teams, external suppliers and engage with the customer to develop new policies, design processes / procedures and develop technical designs to drive remediation.
• Help to design a secure connected architecture.
• Assist engineering teams in developing secure systems
• Audit embedded code to identify security vulnerabilities and develop solutions
• Lead security engineering initiatives and serve as a point of contact
• Develop the security baselines and documentation as per required
• Work with monitoring and ensure logs are forwarded to the SIEM capability
• Assess vulnerabilities and implement solutions and strategies that mitigate those risks
• Identify, implement, and automate cybersecurity measures and best practices
• Coordinating incident response across the organisation to respond to threats and security breaches
• Upgrade security solutions, research new attack vectors and develop threat models
• Performing security control audits and coordinating with other teams within the organisation to implement the outcomes of security controls

Skills:

• Cloud Security and Development (AWS a prerequisite)
• Understanding and experience with CICD and secure CICD best practices (CircleCI)
• Vulnerability Mgmt tooling (code scanning, IaC)
• Security expertise in cryptography and exploit development
• Strong investigative and analytical problem solving skills.
• Experience with secure architecture design. Strong communication skills, both written and spoken.
• Penetration testing experience.
• Proficient in software development, auditing code and features.
• Experience with SQL and API development best practices is a plus.

Qualifications:

• Bachelor's or Master's degree in Computer Science, Cyber Security, or a related field or proof of exceptional skills in related fields, with practical software engineering experience.
• Previous proven experience in Cyber Security
• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls).
• AWS specific certifications such as: AWS Certified Security - Specialty, or AWS Certified Developer are a plus.
• Industry certifications, such as: CISSP, CISM, or CISA, are a plus.