Cyber Security Partner (II)
Join to apply for the Cyber Security Partner (II) role at Tesco Technology in Welwyn Garden City, England, United Kingdom.
About the role and the Security Partners team
We are the trusted security advisors for Tesco Technology. Our purpose is to collaborate seamlessly with product and engineering stakeholders, leveraging our deep expertise in cyber security to design and implement robust, resilient solutions that protect our business and customers from cyber threats. We are a dynamic and expanding global team of 15+ experts, serving as the strategic link between the wider security group and software engineering teams that develop cutting‑edge services at scale to support the retail business.
Responsibilities
As a Security Partner you will:
- Engage deeply within product areas and influence the way security is delivered.
- Apply secure design principles, cloud security, secure development practices and patterns, application security, secure pipelines, open‑source security and related disciplines.
- Act as a trusted advisor to enable scalable and sustainable security maturity throughout the SDLC process.
Qualifications
* Hands‑on product security experience developing requirements, reviewing architecture, applying design principles, and application, pipeline, infrastructure, and secure monitoring.
* Experience leading security initiatives, dev(sec)ops practices with product and engineering teams.
* Threat modelling and designing security/privacy controls to mitigate risks.
* Application security, supply chain security, SAST, DAST, SCA, and IAC tools.
* Reviewing code to spot weaknesses and suggesting mitigations.
* Industry standards experience: OWASP ASVS, OWASP Top 10, CIS controls and benchmarks.
* Understanding of web applications, REST APIs, microservices, eventing, modern frameworks, and mobile apps.
* Experience with cloud native and hybrid architectures, containerised workloads and Kubernetes.
* Some development experience (Java, Cloud, Golang, Python) is a plus.
* Degree in computer science, information systems, engineering or equivalent experience.
* Regulation knowledge (GDPR, PCI‑DSS) desirable.
* Azure or AWS cloud security certifications desirable.
* Strong communication, listening, and influencing skills.
Benefits
* Annual bonus scheme up to 20% of base salary.
* Holiday starting at 25 days plus a personal day (plus bank holidays).
* Private medical insurance.
* 26 weeks maternity and adoption leave (after 1 year’s service) at full pay, followed by Statutory Maternity/Adoption Pay and 4 weeks fully paid paternity leave.
* Free 24/7 virtual GP service, Employee Assistance Programme (EAP) and mental well‑being support.
About Us
Our vision at Tesco is to become every customer’s favourite way to shop, whether they are at home or out on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. We are proud of an inclusive culture where diversity is valued. We are Disability Confident and committed to an accessible recruitment process.
#J-18808-Ljbffr