Information Security Engineer (DevSecOps) - job 1 of 2

Why Bink?

Our Vision: We are a FinTech company that are on a mission to transform the way people engage with loyalty programmes. Our unique offering will see us partnering with more and more Tier 1 banks. Combined with our own direct to consumer app offering, this means growth and heaps of career opportunity.

Our Commercial Model: Bink has partnered with Barclays Plc and Lloyds Banking Group to deploy our technology & services in the hands of +27 million customers in the UK, and we believe we can build further scale by partnering with multiple players in the payments’ ecosystem to attract and onboard a multitude of merchants onto our platform and serve their unique loyalty offers through the mobile banking channels (currently Barclays, Lloyds, Halifax and Bank of Scotland).

Our Flexibility: Hours or location, we don’t mind as long as we all come together as a team regularly to keep the spirit alive.

Our People: We’re a big fan of talented people. We’re also a fan of loyalty and rewards. Put those together and you get a company who respects talent and recognises loyalty with some rather lovely rewards.

Your Learning Curve: We have amazing leaders, great tech mentors and experienced Engineers who you can shadow and learn from every day.

About the Information Security Engineer Role

Reporting to Mark Swarbrick, our Head of DevOps and Information Security, you will be responsible for developing and implementing information security technology solutions which will address the current and future security threats whilst using the latest cyber threat technologies.

You will play an integral part in building a modern and effective security function and in return, we will give you exposure to all aspects of the InfoSec discipline and the opportunity to deepen your security skills and knowledge.

What You’ll Be Doing as an Information Security Engineer

Application Security:

• Providing security subject matter expertise to the development teams in the principles of secure by design/privacy by design and secure coding practices
• Utiltising application security tooling (SAST/DAST)
• Supporting security initiatives with application development and containers including Docker and Kubernetes.
• Penetration testing and managing the outcomes (scoping and working with third party providers).
• Working with cloud security principles and protocols.

Technical Security Assurance:

• Supporting security assurance activities, external security audits and enquiries.
• Supporting Bink’s on-going cyber security awareness programme
• Reviewing and confirming standard and privileged user reviews are being effectively performed on a regular basis.
• Reviewing and confirming technical Third Party Service providers are operating with relevant security controls and compliance in place, security assurance checks
• Supporting external and internal audits
• Supporting security enquiries from potential and existing clients

Cyber Response & TI:

• Managing and investigating occasional security events across the enterprise infrastructure, applications and perimeter both internally and alongside our 24/7 SOC
• Providing expertise on current and emerging security threats using the latest cyber threat intelligence.
• Working with ATP's and cyber threat intelligence.

Audit and Compliance:

• Working with cyber security standards, frameworks, and compliance-led initiatives, including achieving Cyber Security Essentials and NIST Cybersecurity framework.
• Working with cyber security best practice, common attack types and detection/prevention methods, including OWASP, PCI DSS and NIST guidelines.
  

What You’ll Work With as an Information Security Engineer

• Share Options in BINK – we want our employees to be truly invested in our business and be rewarded for the part they play in our success
• Company bonus scheme
• 25 days paid holiday, plus bank holidays and the option to buy/sell up to 5 days holiday
• Vitality Health Insurance, or Wellbeing Allowance, supporting your physical and mental health
• Automatic enrolment into Aviva private pension plan
• Enhanced family leave - 6 months full pay for maternity and adoption leave, 3 weeks full pay for paternity
• Life Assurance and Income Protection, providing peace of mind for you and your loved ones
• Employee assistance programme
• Volunteering leave - 2 days per year to get involved in a cause you're passionate about
• Flexible working, hours, location, we don’t mind as long as we all come together as a team regularly to keep the spirit alive
• Agile rewards, celebrating a job well done in a way that matters to you
• Free drinks and snacks at the offices
• Regular team events, hackathons, lunches, gaming nights, well-being activities & much more

• 1st Interview - Video interview with Head of DevOps and Security
• 2nd Interview - Video interview with Head of DevOps and DevOps Engineer

Cyber Security, Cloud Security, API SecurityCyber Security, Cloud Security, API Security, Azure, Docker, Kubernetes, Terraform, Python