Contract Spy
Hybrid (Canary Wharf, London, UK)
Platform Security Engineer
Canary Wharf, UK
Hybrid (2 days a week)
Long Term Contact (Inside IR35)
Required Skills & Experience
Technical
• 3–5 years of experience in DevSecOps, platform security, or information security engineering roles.
• Hands-on experience building SCBs for enterprise DevOps and collaboration tools (Bitbucket, Bamboo, Jenkins, Nexus, Jira, Confluence, SonarQube, Mend, or equivalent).
• Strong working knowledge of NIST CSF v2.0, OWASP Security Controls, and ISO 27001/27002.
• Experience conducting configuration assurance reviews, control gap assessments, and risk-based remediation planning.
• Familiarity with GDPR, NIS2, DORA, or equivalent regulatory frameworks and their impact on platform configuration.
• Experience writing Incident Response Playbooks or security runbooks aligned to NIST or SANS frameworks.
Delivery & Communication...