Security Engineering Manager

General information

Job Title:
Security Engineering Manager

Ref #:
9426

Location:
Edinburgh

Department:
BAR - Technology Operations

Business Area:
Technology Operations

Working time:
Full-Time

Date Published:

Serving our customers, communities, and planet a little better every day.

Salary
- Between £58,960 - £80,000 + annual bonus & benefits

Location
– Edinburgh, Permanent

Office Attendance
- Our roles are hybrid; however, you should be able to travel to our Edinburgh office 2 days per week for this position.

Closing Date
– Applications close 26/11/2025 at 5pm

A chance to thrive
We're looking for a Security Engineering Manager to join our Vulnerability Management and Assurance team at Tesco Bank, part of Barclays Bank UK Plc.

The Vulnerability Management and Assurance team are the technical experts in technical vulnerabilities and weaknesses – senior stakeholders rely on our ability to understand deeply technical topics and interpret the situation at the business level. Our team is responsible for detecting, tracking, and advising on vulnerabilities to protect the Bank and our customers.

What You'll Be Doing

• Leading, line managing and developing the assurance and consultancy team – driving improvements and learning within the team; being the expert to support the team in case of difficulties.
• Providing security assurance and guidance for complex projects throughout their life-cycles and giving specialist input for go-live decisions.
• Liaising with departments across the bank and build working relationships with other teams to spread awareness of security and help the bank achieve required levels of protection and governance.
• Being the dedicated contact for ensuring security consultancy takes place in line with processes for complex programmes.
• Helping us modernise our practices and drive improvements to the ways the team works, our vulnerability detection and management tooling, security testing processes and their associated processes.

We need you to have

• Excellent communication abilities with technical and non-technical colleagues. Experience in managing a technical team.
• Understanding of technical IT Security Risk management and ability to relate deeply technical details to a business wide impact.
• Thorough understanding of security best practices and anti-patterns, familiarity with tooling to support these. Experience in security architecture and cloud architecture.
• Technical expertise on vulnerabilities and an intimate understanding of an attacker mindset and their techniques. Strong understanding of current and past OWASP Top 10s (web/API/mobile), CVSSv2 and CVSSv3, MITRE ATT&CK, and NIST Framework.
• Demonstrable experience in working with a range of security assessment types. Strong background in working with pentest reports and vendors.

And if you have any of these, even better

• Strong understanding of Agile practices and effectively employing the principles in a real life workplace.
• Experience in offensive IT Security tooling and practices (e.g. past experience in pentesting, HackTheBox, TryHackMe,).
• IT Security related achievements, publications, certifications, and other credentials.

We don't expect you to tick every box, and if you feel you hit most of the brief, it's worth exploring to further develop your career here with us.

What's In It For You

• Prepare for your retirement with our colleague pension scheme.
• Private Medical Insurance (WL2+) and virtual GP Service 365 days a year.
• Performance related annual bonus.
• Indulge in a generous holiday allowance with a minimum of 7.2 weeks, with the opportunity to buy more.
• Embrace the benefits of our Colleague Clubcard, enjoy a 10% discount that increase to 15% every payday (worth up to 2K). As an added perk, we'll give you a second card to share with someone else.
• Benefit from our family-oriented initiatives, encompassing enhanced maternity leave pay, a shared parental leave policy, and a generous paid paternity leave.
• A place to get on - take advantage of our ongoing learning opportunities and training, to help you achieve the job and career you want.

Everyone's welcome
We want all our colleagues to always feel welcome and be themselves at Tesco Bank, part of Barclays Bank UK Plc. We're committed to building a more inclusive workplace and celebrating everything that makes colleagues unique, and value the richness and diversity this brings to our business. A more diverse business helps us deliver on our purpose to serve our customers, communities, and planet a little better every day.

How to apply

We value our people and diverse teams and believe the variety of backgrounds and experiences make us stronger to achieve our goals.

Our colleagues are working hybrid, taking time to meet with colleagues in our offices for moments that matter, such as team catch ups, planning meetings and more. If you're interested in finding out more about what a career at Tesco Bank looks like, click apply to find out more

Why Tesco Bank?

Whether we're helping our customers or looking after our people, you'll find there's a warmth and friendliness to everything we do.

It means we put your wellbeing first and give you bags of support, training and development, so you can build the career that's right for you. It's about looking after each other with the same care that we give to our customers.

We've created an environment where everyone feels included, accepted and welcome. Which means you can bring your whole self to work every day and totally thrive at the same time.

Lovely.

Say hello to life in Tesco Bank.