Your Key Responsibilities And Impact
* Architecture of Systems
* Perform security risk assessments on BBC Digital Product environments at various stages of the Software
* Development Life Cycle (SDLC) and recommend security enhancements, remediation and mitigation strategies.
* Digital Policy & Guidance
* Research and understand new security technologies, trends and threats related to BBC Digital Products and environments and use this research to provide technical and non‑technical guidance to both internal stakeholders and 3rd‑parties.
* Assist in running the BBC Security Champions network including facilitating sessions, engaging with champions, providing guidance around security queries and continuing to evolve the network.
* Support tactical initiatives to secure Digital Product environments for the BBC including contributing to Information Security policies, procedures and standards.
* Develop and maintain relationships with Digital Product key suppliers, Digital Product staff, Security Champions and other stakeholders.
* Development
* Peer with the rest of the InfoSec team to design, develop and deploy code for systems that assist the BBC InfoSec function and assist BBC teams to understand their current risk posture.
* Vulnerability Management
* Support the processes around security issues identified in BBC Digital Product environments, including assisting with investigation, validation and revalidation.
Your Skills And Experience
* Familiarity with at least one coding language (e.g., Python, JavaScript, etc.) with demonstrable experience of taking an active role in both designing and implementing digital software projects using these languages.
* Ability to convey complex technical knowledge and guidance, in written form and verbally, to multiple audiences including internal stakeholders and third parties.
* Demonstrable ability to break complex problems into tangible parts, self‑direct required learning and operate in a semi‑autonomous manner.
* Experience deploying systems and applications from code to a cloud environment (e.g., AWS).
* Demonstratable experience of a wide range of technical security knowledge and applying this to identify and remediate security issues in digital software products.
Desired But Not Required
* Experience of being involved in a community and taking an active lead in organizing and facilitating.
* Experience with STRIDE Threat Modelling and mitigating issues from application security tooling would be ideal.
If you can bring some of these skills and experience, along with transferable strengths, we’d love to hear from you and encourage you to apply.
Seniority level
* Mid‑Senior level
Employment type
* Full-time
Job function
* Design, Art/Creative, and Information Technology
Industries
* Software Development
#J-18808-Ljbffr