Role OVO-ViewSalary banding: £53,000 - £76,000Experience: Mid-levelWorking pattern: Full-TimeReporting to: Senior Security Engineer ManagerSponsorship: Unfortunately we are unable to offer sponsorship for this roleThis role in 3 words: Reducing Technology RiskTop 3 qualities for this role: Passionate, Collaborative, Detailed Where you’ll work: Depending on the needs of your business area, we expect hub based people to be in the office at least once a week, and to go to OVO Connection events in-person. You’ll be assigned to the closest one of our three hub offices, Bristol, Glasgow, or London; unless your role requires field-based work. Each hub has accessible spaces to park your laptop, is designed to inspire people, help them connect and bring big ideas to life. Everyone belongs at OVO At OVO, we are on a mission to solve one of humanity's biggest challenges, the climate crisis. And we know it takes all of us to change the world. That's why we need diverse people from all abilities, gender identities, ethnicities, ages, sexual orientations, life experiences and backgrounds to join us. Teamworking for the planetEverything we do here spins around <a href="https://company.ovo.com/planzero/">Plan Zero.</a> So, naturally, the team you’ll be joining plays a gigantic role in making that happen. Here’s how:We’re hiring creators, challengers and coaches. Every role we’re hiring puts people at the heart of our security strategy and uses technology and operational processes to build a resilient and performant business. The Path to Zero is paved with secure technologies and operations! This role in a nutshell:Our people depend on us to deliver a rich, safe digital experience that is also a hard target for cyber threats. OVO has scaled rapidly in recent years - our processes and platforms need to meet and exceed those scaled demands. You’ll lead projects to implement controls and automate remediation activities in response to persistent security problems. You’ll be given challenging tasks, and you will take ownership and responsibility for driving them forwards. Your key outcomes will be:<ul><li>Enhance the security posture of OVO systems across the technology estate by security control implementation, monitoring and management.</li><li>Utilise security tooling and processes to reduce organisational risks and improve compliance to security best practice and widely recognised standards.</li><li>Work collaboratively with other teams to proactively assist in identification, documentation, and response to security issues and gaps.</li></ul>Systems: <ul><li>Mobile Device Management (e.g. Intune and Mosyle)</li><li>Workflow/process automation</li><li>Cloud &amp; SaaS platform management (specifically for security posture monitoring)</li><li>Identity and Access Management and Privileged Access Management platforms (including Google Workspace and Entra ID)</li><li>Familiarity with Endpoint Detection and Response and SIEM</li><li>Vulnerability and Patching Management</li><li>Bug Bounty Platforms</li><li>Issue and Project Tracking (Jira)</li><li>Cyber Asset and Attack Surface Management Platforms</li></ul> You’ll be a successful Attack Surface Engineer at OVO if you have…<ul><li>Are a challenger: settings and monitoring performance against security standards requires an analytical mindset, strong systems thinking and ultimately good judgement. Our culture calls on us to make wise decisions despite ambiguity. And when you inevitably make mistakes, you learn from them and share them with others so that we can all learn. </li><li>Are a creator: you have experience of risk and threat assessment, problem-solving security gaps/weaknesses. You will be able to think outside the box to come up with alternative solutions to the norm when fixing problems. You will have a strong understanding of securing technical systems and experience using security tools. </li><li>Are a communicator and coach: you are committed to ongoing personal and team development, for example evangelising a secure and safe digital experience with clear and direct written and verbal communication. You will be able to take technical concepts and reframe them so that different audiences can understand them.</li></ul> Let’s talk about what’s in it for youWe’ll pay you between £53,000 and £76,000, depending on your specific skills and experience.We keep our pay ranges broad on purpose to give us, and you, flexibility to match your experience to our zero carbon mission.You’ll be eligible for an on-target bonus of 15%. We have one OVO bonus plan that focuses on the collective performance of our people to deliver our Plan Zero goal. We also offer plenty of green benefits and progressive policies to help you feel like you belong at OVO…and there’s flex pay. We'll give you 9% Flex Pay on top of your salary – 4% of this is auto enrolled into your pension, and the remaining 5% is yours to do what you like with. You can use this to buy from our extensive range of flexible benefits, including our green benefits which we've put at the heart of our offering, add to your pension or even take it as cash. Here’s a taster of what’s on offer: For starters, you’ll get 34 days of holiday (including bank holidays). For your health With benefits like a healthcare cash plan or private medical insurance depending on your career level, critical illness cover, life assurance, health assessments, and more For your wellbeing With gym membership, travel insurance, workplace ISA, will writing services, dental insurance, and more For your lifestyle With extra holiday buying, discount dining, home &amp; tech loans, and supporting your favourite charities with give-as-you-earn donations For your home  Get up to £400 towards any OVO Energy plan, plus great discounts on solar, smart thermostats and EV chargers For your commute Nab a great deal on ultra-low emission car leasing, plus our cycle to work scheme and public transport season ticket loans Want to hear about our full range of flexible benefits and progressive people policies? Our People Team can tell you everything you need to know.For your BelongingTo find better ways to support our people, we need to listen to each other’s experiences and find ways to build a truly inclusive and diverse workplace. As part of this, we have 8 Belonging Networks at OVO. Led by our people, for our people - so when you join OVO, you can play a part - big or small - with any of the Networks. It's up to you. Oh, and one last thing...We’d be thrilled if you tick off all our boxes, yet we also believe it’s just as important we tick off all of yours. And if you think you have most of what we’re looking for but not every single thing, go ahead and hit apply. We’d still love to hear from you!If you have any additional requirements, there’s a space to let us know on the application form; we want to make the process as easy and comfortable for you as possible.

OVO Energy is an independent energy technology company and supplier. The company was launched in 2009. OVO Energy is set to make energy cheaper, greener, and simpler. The company has brought great service, clear information, and honesty to a broken industry. These days our sights are set higher.

Attack Surface Engineer

Role OVO-ViewSalary banding: £53,000 - £76,000Experience: Mid-levelWorking pattern: Full-TimeReporting to: Senior Security Engineer ManagerSponsorship: Unfortunately we are unable to offer sponsorship for this roleThis role in 3 words: Reducing Technology RiskTop 3 qualities for this role: Passionate, Collaborative, Detailed Where you’ll work: Depending on the needs of your business area, we expect hub based people to be in the office at least once a week, and to go to OVO Connection events in-person.&nbsp;You’ll be assigned to the closest one of our three hub offices, Bristol, Glasgow, or London; unless your role requires field-based work. Each hub has accessible spaces to park your laptop, is designed to inspire people, help them connect and bring big ideas to life. Everyone belongs at OVO At OVO, we are on a mission to solve one of humanity's biggest challenges, the climate crisis. And we know it takes all of us to change the world. That's why we need diverse people from all abilities, gender identities, ethnicities, ages, sexual orientations, life experiences and backgrounds to join us. Teamworking for the planetEverything we do here spins around <a href="https://company.ovo.com/planzero/">Plan Zero.</a> So, naturally, the team you’ll be joining plays a gigantic role in making that happen. Here’s how:We’re hiring creators, challengers and coaches. Every role we’re hiring puts people at the heart of our security strategy and uses technology and operational processes to build a resilient and performant business. The Path to Zero is paved with secure technologies and operations! This role in a nutshell:Our people depend on us to deliver a rich, safe digital experience that is also a hard target for cyber threats. OVO has scaled rapidly in recent years - our processes and platforms need to meet and exceed those scaled demands. You’ll lead projects to implement controls and automate remediation activities in response to persistent security problems. You’ll be given challenging tasks, and you will take ownership and responsibility for driving them forwards. Your key outcomes will be:<ul><li>Enhance the security posture of OVO systems across the technology estate by security control implementation, monitoring and management.</li><li>Utilise security tooling and processes to reduce organisational risks and improve compliance to security best practice and widely recognised standards.</li><li>Work collaboratively with other teams to proactively assist in identification, documentation, and response to security issues and gaps.</li></ul>Systems:&nbsp;<ul><li>Mobile Device Management (e.g. Intune and Mosyle)</li><li>Workflow/process automation</li><li>Cloud &amp; SaaS platform management (specifically for security posture monitoring)</li><li>Identity and Access Management and Privileged Access Management platforms (including Google Workspace and Entra ID)</li><li>Familiarity with Endpoint Detection and Response and SIEM</li><li>Vulnerability and Patching Management</li><li>Bug Bounty Platforms</li><li>Issue and Project Tracking (Jira)</li><li>Cyber Asset and Attack Surface Management Platforms</li></ul> You’ll be a successful&nbsp;Attack Surface Engineer at OVO if you have…<ul><li>Are a challenger: settings and monitoring performance against security standards requires an analytical mindset, strong systems thinking and ultimately good judgement. Our culture calls on us to make wise decisions despite ambiguity. And when you inevitably make mistakes, you learn from them and share them with others so that we can all learn. </li><li>Are a creator: you have experience of risk and threat assessment, problem-solving security gaps/weaknesses. You will be able to think outside the box to come up with alternative solutions to the norm when fixing problems. You will have a strong understanding of securing technical systems and experience using security tools. </li><li>Are a communicator and coach: you are committed to ongoing personal and team development, for example evangelising a secure and safe digital experience with clear and direct written and verbal communication. You will be able to take technical concepts and reframe them so that different audiences can understand them.</li></ul> Let’s talk about what’s in it for youWe’ll pay you between £53,000 and £76,000, depending on your specific skills and experience.We keep our pay ranges broad on purpose to give us, and you, flexibility to match your experience to our zero carbon mission.You’ll be eligible for an on-target bonus of 15%. We have one OVO bonus plan that focuses on the collective performance of our people to deliver our Plan Zero goal.&nbsp;We also offer plenty of green benefits and progressive policies to help you feel like you belong at OVO…and there’s flex pay. We'll give you 9% Flex Pay on top of your salary – 4% of this is auto enrolled into your pension, and the remaining 5% is yours to do what you like with. You can use this to buy from our extensive range of flexible benefits, including our green benefits which we've put at the heart of our offering, add to your pension or even take it as cash. Here’s a taster of what’s on offer:&nbsp;For starters, you’ll get 34 days of holiday (including bank holidays). For your health With benefits like a healthcare cash plan or private medical insurance depending on your career level, critical illness cover, life assurance, health assessments, and more For your wellbeing With gym membership, travel insurance, workplace ISA, will writing services, dental insurance, and more For your lifestyle With extra holiday buying, discount dining, home &amp; tech loans, and supporting your favourite charities with give-as-you-earn donations For your home&nbsp; Get up to £400 towards any OVO Energy plan, plus great discounts on solar, smart thermostats and EV chargers For your commute Nab a great deal on ultra-low emission car leasing, plus our cycle to work scheme and public transport season ticket loans Want to hear about our full range of flexible benefits and progressive people policies? Our People Team can tell you everything you need to know.For your BelongingTo find better ways to support our people, we need to listen to each other’s experiences and find ways to build a truly inclusive and diverse workplace. As part of this, we have 8 Belonging Networks at OVO. Led by our people, for our people - so when you join OVO, you can play a part - big or small - with any of the Networks. It's up to you. Oh, and one last thing...We’d be thrilled if you tick off all our boxes, yet we also believe it’s just as important we tick off all of yours. And if you think you have most of what we’re looking for but not every single thing, go ahead and hit apply. We’d still love to hear from you!If you have any additional requirements, there’s a space to let us know on the application form; we want to make the process as easy and comfortable for you as possible.

Attack Surface Engineer

About the Job

About the Company

OVO Energy

Similar Jobs

(Senior) OT Security Engineer (all genders)

(Senior) OT Security Engineer (all genders)

Cloud Security Engineer

Cloud Security Engineer

Principal Security Engineer (Risk Specialist)

Principal Security Engineer (Risk Specialist)

Cybersecurity GRC Analyst | Digital Infrastructure

Cybersecurity GRC Analyst | Digital Infrastructure

SecOps Engineer

SecOps Engineer

Security Operations Specialist

Security Operations Specialist

Product Security Intern (Munich)

Product Security Intern (Munich)

Security Systems Support Specialist

Security Systems Support Specialist

Third-party Cyber Risk Analyst

Third-party Cyber Risk Analyst

Cybersecurity Analyst (Product Security Engineer)

Cybersecurity Analyst (Product Security Engineer)