Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

CLS is seeking a Cyber Hygiene and Metrics Engineering Lead to design and implement cyber hygiene security tooling and a security metrics analytics and reporting platform. This role involves maturing cyber hygiene architecture, managing vulnerability lifecycles, supporting AI remediation, and ensuring scan completeness. The lead will also engineer solutions for crypto discovery, secure storage and transfer, API security, application security testing, and threat modeling. A key responsibility is building a platform to measure security control effectiveness using big data and analytics.

Responsibilities

Lead the end-to-end design and implementation of cyber hygiene security tooling and the security metrics analytics and reporting platform.
Mature the cyber hygiene architecture across CLS to ensure comprehensive discovery of vulnerabilities and misconfigurations.
Manage the vulnerability management (VM) lifecycle, including standardization, modernization, and optimization.
Support AI application remediation and patching.
Ensure scan completeness of the estate against the CMDB.
Engineer solutions for crypto discovery and inventory.
Develop solutions for secure storage and transfer of files.
Implement an API security platform to inventory APIs and identify vulnerabilities.
Engineer application security testing (SAST/DAST/SCA/Frontier AI code scanning).
Integrate code scanning tooling into CI/CD pipelines.
Integrate with developer tooling and reconcile with SNOW VMR ticketing.
Ensure consistency in processes with cyber hygiene operations teams for vulnerability remediation.
Develop automated threat modeling platforms and integrate them with security architecture design processes.
Build a platform to measure the effectiveness of security controls using big data and analytics.
Build controls to limit LLM risks including prompt injection, data leakage, model poisoning, and hallucination exploitation.
Define and implement AI guardrails and policy enforcement mechanisms.
Design and implement secure AI architecture patterns.
Implement monitoring and detection controls for AI misuse.
Engineer solutions for securing AI agents.
Build and lead a high-performing security engineering function aligned to product-based delivery.
Help define the target operating model for security engineering, including platform ownership, DevSecOps integration, and automation-first principles.
Establish clear engineering standards, patterns, and reusable security services.
Manage tooling selection, deployment, and vendor relationships.
Integrate tooling with downstream and upstream systems.
Develop tooling automation.
Continuously optimize tooling.
Monitor platform health.
Engineer remediation processes.
Engineer resiliency.
Partner with CIO, CISO, heads of technology, and senior business leaders to align security engineering initiatives with organizational priorities.
Work closely with enterprise security architects and solution architects on control gaps, maturity, and business cases.
Translate risk and threat insights into practical engineering outcomes.
Manage vendor relationships and strategic technology partnerships.

Requirements

Senior leadership in security engineering / cyber engineering in complex, regulated environments (markets technology / investment banking / FMI strongly preferred).
Proven delivery of large-scale security platforms end-to-end (design → build → run), including multi-system integration.
Deep experience in application security/vulnerability/exposure management and/or identity & privileged access engineering.
Strong track record of regulatory/audit engagement and evidence-based assurance.
Engineering mindset: able to go deep on architecture, automation, telemetry, and operational resilience.
Strategic thinker with the ability to translate vision into execution.
Strong communicator, able to influence at executive level.
Data-driven and outcome-focused, with a bias toward measurable security improvements.
Comfortable operating in fast-paced, evolving environments.
Extensive experience in security engineering and architecture (~10 years), including ~5-7+ years in a senior leadership role.
Experience working in highly regulated operations and complex organizational structures.
Experience reporting to senior leadership supporting executive level decision-making and prioritization.
Experience engaging in complex governance, contributing to multi-layered committees or forums.
Understand, interpret and apply regulatory requirements, compliance and industry standards.
Experience with ServiceNow VM modules, Qualys and Wiz desirable.
Experience with security configuration baselines and automated testing.
Experience with EDR deployment and management.
Experience with AI Security.
Experience in securing AI agents.

Skills

Cyber hygiene
Security metrics analytics
Reporting platform
Vulnerability management
AI application remediation
AI security
Crypto discovery
Inventory engineering
Secure storage
Secure transfer
API security
Application security testing
SAST
DAST
SCA
Frontier AI code scanning
CI/CD pipelines
Developer tooling
Threat modeling
Big data
Analytics
Data architecture
Data models
Data governance
BI
Big data technologies
Data engineering
Cloud engineering
Data normalization
ETL
LLM risks
Prompt injection
Data leakage
Model poisoning
Hallucination exploitation
AI guardrails
Policy enforcement
Prompt filtering
Output validation
Access control
Secure AI architecture patterns
Monitoring
Detection controls
AI agents
Security engineering leadership
Operating model definition
Product-based delivery
DevSecOps integration
Automation-first principles
Engineering standards
Engineering patterns
Reusable security services
Tooling selection
Tooling deployment
Vendor management
System integration
Tooling automation development
Continuous tooling optimization
Platform health monitoring
Remediation engineering
Resiliency engineering
Stakeholder engagement
Strategy development
Risk management
Threat intelligence
Vendor relationship management
Technology partnerships

Location

London

Work Type

Hybrid working

Experience Level

Senior leadership
Director
~10 years in security engineering and architecture
~5-7+ years in a senior leadership role

Salary/Compensations

Base pay / salary (London)

Benefits

25 holiday days and 3 ‘life days’ (in addition to bank holidays) for UK/Asia
23 holiday days for US
2 paid volunteer days
Generous parental leave policies
Parental transition coaching programmes and support services
Wellbeing and mental health support resources
Employee Networks (Women’s Forum, Black Employee Network, Pride Network)
Active support of flexible working
Monthly ‘Heads Down Days’ with no meetings
Generous non-contributory pension provision for UK/Asia employees
401K match from CLS for US employees
Private medical insurance
Dental coverage
Social events
Annual flu vaccinations
Discounts and savings and cashback across a wide range of categories (UK employees)
Discounted Gym membership / Sweat equity program (US employees)
Access to Discover – comprehensive learning platform with 1000+ courses from LinkedIn Learning
Access to frequent development sessions

About the Company

CLS is the trusted party at the centre of the global FX ecosystem, making FX safer, smoother, and more cost-effective.
Utilized by thousands of counterparties, CLS handles trillions of dollars’ worth of currency daily.
CLS's global settlement infrastructure reduces systemic risk and provides standardization for participants in actively traded currencies.
CLS's approach to multilateral netting shrinks funding requirements by over 96% on average.
CLS products enable clients to manage risk across the full FX lifecycle through efficient processing tools and market intelligence.
CLS values include Pivotal purpose, Trusted guardian, Targeted innovation, Facilitate connections, Delivering excellence, and Inclusive culture.

Equal Opportunity

CLS celebrates inclusion and considers it one of its strongest assets.
CLS is committed to fostering an environment in which everyone feels comfortable to be who they are, and inclusion is valued.