> Markdown version of [/jobs/ext/2727237-director-cyber-hygiene-and-metrics-engineering-lead](https://www.wearedevelopers.com/jobs/ext/2727237-director-cyber-hygiene-and-metrics-engineering-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director, Cyber Hygiene and Metrics Engineering Lead - **Company:** CLS LTD - **Location:** London, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Data Analysis, Automation of Tests, Big Data, Cloud Engineering, Configuration Management Databases, Cyber Security, Data Architecture, Information Engineering, Data Governance, Information Leak Prevention, Extract Transform Load (ETL), Data Normalization, Programming Tools, Systems Integration, User-Centered Design, Software Vulnerability Management, Large Language Models, IT Architecture, Software Security, Data Analytics, Devsecops, Qualys, Servicenow, Static Application Security Testing, Dynamic Application Security Testing - **Published:** September 5, 2026 - **Apply:** https://startup.jobs/director-cyber-hygiene-and-metrics-engineering-lead-cls-group-9797257 ## About the Role + Experience in securing AI agents., * Senior leadership in security engineering / cyber engineering in complex, regulated environments (markets technology / investment banking / FMI strongly preferred). * Proven delivery of large-scale security platforms end-to-end (design * build * run), including multi-system integration. * Deep experience in app application security/vulnerability/exposure management and/or identity & privileged access engineering. * Strong track record of regulatory/audit engagement and evidence-based assurance. * Engineering mindset: able to go deep on architecture, automation, telemetry, and operational resilience. * Strategic thinker with the ability to translate vision into execution. * Strong communicator, able to influence at executive level. * Data-driven and outcome-focused, with a bias toward measurable security improvements. * Comfortable operating in fast-paced, evolving environments. Professional qualifications / certifications * Extensive experience in security engineering and architecture (~10 years), including ~5-7+ years in a senior leadership role. * Experience in: + Working in highly regulated operations and complex organizational structures. + Reporting to senior leadership supporting executive level decision-making and prioritization. + Engaging in complex governance, contributing to multi-layered committees or forums. * Understand, interpret and apply regulatory requirements, compliance and industry standards. ## Description Our ambition to make a positive difference starts with our people. Our values underpin everything that we do at CLS and define our working environment: * Pivotal purpose * Trusted guardian * Targeted innovation * Facilitate connections * Delivering excellence * Inclusive culture Job information: * Functional title - Cyber Hygiene and Metrics Engineering Lead * Department - CISO * Corporate level - Director * Report to - Nathan Macrides (Head of Security Architecture, Design and Engineering) * Location - London * Base pay / salary (London) What you will be doing: Lead the end-to-end design and implementation of the cyber hygiene security tooling and the security metrics analytics and reporting platform. The lead will work closely with the security operation teams that run the security controls related to cyber hygiene and security analytics, measurement, metrics and reporting: * Mature the cyber hygiene architecture across CLS to ensure comprehensive discovery of vulnerabilities, misconfigurations. + Vulnerability management (VM) lifecycle, standardized processes, modernization in the face of AI, standardization and optimization. + Support AI application remediation and patching. + Ensure scan completeness of the estate against the CMDB. + Experience with ServiceNow VM modules, Qualys and Wiz desirable. + Experience with security configuration baselines and automated testing. * Crypto Discovery and Inventory Engineering - engineer the solution to discover and inventory crypto key material across the estate in preparation for a post quantum crypto world. * Experience with EDR deployment and management. * Secure Storage & Transfer Engineering - develop solutions to securely transfer files in and out of the organization, at the user and application levels. * API Security Engineering - implementation of API security platform to inventory apis and find vulnerabilities and misconfiguration in APIs. * Application Security Testing engineering (SAST/DAST/SCA/Frontier AI code scanning) + Integration the code scanning tooling into the CI/CD pipelines. + Integration with developer tooling and reconciliation with SNOW VMR ticketing. + Working closely with cyber hygiene operations teams to ensure that the processes are consistent and vulnerabilities and remediate with SLA and directed to the correct remediation owners. * Threat Modelling Engineering - development of automated threat modelling platforms and integration the with security architects design processes to ensure threat modelling is executed as part the architecture design process. * CLS will be building a platform to measure the effectiveness of security controls across the estate this will require a big data and analytics platform that will necessitate metrics platform engineering (data architecture and data models, data governance, analytics and BI, big data technologies, data engineering, cloud engineering, data normalization and ETL). * Experience with AI Security + Build controls to limit LLM risks including prompt injection, data leakage, model poisoning and hallucination exploitation etc. + Define and implement AI guardrails and policy enforcement mechanisms (prompt filtering, output validation, access control etc.) + Design and implement secure AI architecture patterns. + Implement monitoring and detection controls from AI misuse., * Build and lead a high-performing security engineering function, aligned to product-based delivery. * Help define the target operating model for security engineering, including platform ownership, DevSecOps integration, and automation-first principles. * Establish clear engineering standards, patterns, and reusable security services. * Experience with tooling selection, deployment and vendor management. * Integration of tooling with downstream and upstream systems * Tooling automation development * Continuous Tooling Optimization * Platform Health Monitoring * Remediation Engineering * Resiliency Engineering Stakeholder Engagement & Strategy * Partner with CIO, CISO, heads of technology and senior business leaders to align security engineering initiatives with organizational priorities. * Work closely with the enterprise security architects and solution architects on control gaps, control maturity and business cases. * Translate risk and threat insights into practical engineering outcomes. * Manage vendor relationships and strategic technology partnerships. ## Related Videos - [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)