Overview
A newly created leadership role responsible for defining, enhancing and governing the security posture of the organisation's middleware estate.
Working closely with the CTO organisation, Security Architecture and platform teams, the role will drive secure configuration standards, compliance, monitoring and future Middleware security strategy, with particular consideration for emerging AI-related threats and risks.
Key Responsibilities
- Define and maintain secure Middleware configuration baselines using CIS benchmarks.
- Partner with Middleware SMEs to implement compliance monitoring and remediation processes.
- Drive continuous improvement of Middleware security controls and standards.
- Ensure appropriate logging and monitoring capabilities are available to support the SOC.
- Assess configuration compliance, challenge non-compliance and drive remediation activity.
- Develop Middleware security strategy aligned to business, regulatory and threat landscape requirements.
- Support security across Important Business Services (IBS) and critical platforms.
- Collaborate with Service Owners, Control Owners, Architecture and Technology teams to improve security outcomes.
Required Experience
- Deep expertise across enterprise Middleware technologies such as WebSphere, MQ, WebLogic, Tomcat, Apache, NGINX and Node.js.
- Proven Experience improving security posture within Middleware or platform environments.
- Strong understanding and practical application of CIS benchmarks.
- Ability to review technical configurations, assess risk and challenge security weaknesses.
- Experience leading technical teams and influencing senior stakeholders.
- Excellent communication and consultative skills.
Desired Experience
- Experience with the MITRE ATT&CK framework and indicators of compromise.
- Knowledge of SOC monitoring and security logging requirements.
- CISSP or similar security certification.
- Experience operating within complex, regulated enterprise environments.
Ideal Candidate
Doug is looking for someone who combines deep middleware expertise with a strong cybersecurity mindset.
The successful candidate must be capable of understanding the technical detail, challenging assumptions and driving a stronger security state across Middleware platforms, distinguishing themselves not just as a technologist, but as a security leader.
Job Title:: Middleware Security SME
Location:: Sheffield, UK
Job Type:: Contract