Role overview

Team: Attack Surface Management
Location: Hub Based - Hybrid for all
Salary banding: £105,000 - £150,000 / 12 month FTC
Experience: Expert
Working pattern: Full-Time
Reporting to: Deputy CISO

Where you’ll work

Hub-based people are expected in the office at least once a week and to attend OVO Connection events in person. You will be assigned to the closest hub office in Bristol, Glasgow or London.

Teamworking for the planet

In this individual contributor role you will lead the reduction of OVO's attack surface through technical leadership of a consolidated identity and access roadmap and highly automated amplification loops for security exposure management.

This role in a nutshell

As Principal Security Engineer (Attack Surface Management) you will shape the enterprise-wide strategy for zero trust access, attack surface observability and security weakness amplification workflows. You will drive innovation in exposure management, guide architectural decisions and lead complex security challenges while championing security standards in configs and code.

Your key outcomes

Weakness management

• Lead security defect discovery, vulnerability management and remediation governance across the enterprise.
• Drive organisational and technical change to enhance proactive security controls.

Identity-focused access security

• Lead development and monitoring of IAM policies, processes and tooling.
• Act as principal SME defining enterprise identity and access management strategy.

Supply chain security

• Improve secure supply chain management controls and reduce third-party risk.
• Influence vendor relationships and security of third-party contracts.

Security risk treatment prioritisation

• Serve as trusted challenger on risk trade-offs to senior stakeholders.
• Define attack path mapping frameworks and influence core architecture with security best practice.

Mentor Senior Technical Staff & Elevate Practice

• Mentor staff and senior engineers in advanced security disciplines.
• Contribute to internal communities of practice and develop training.

You’ll be successful if you…

• Inspire and lead cross-functional teams with excellent communication and influencing skills.
• Think critically and strategically, balancing security ideals with practical business realities.
• Mentor and develop other senior security professionals.
• Are recognised as an expert contributing to security communities or publications.

What’s in it for you

We’ll pay you between £105,000 and £150,000 with a 15% on-target bonus. You’ll receive 9% Flex Pay, 34 days holiday, healthcare benefits, gym membership, cycle to work scheme and access to Belonging Networks.