Cyber Security Engineer Graduate Scheme
Be the team behind the shield. Design, build and strengthen the cyber defences that protect critical services from current and emerging cyber threats.

Engineer the safety net that protects millions
The Chief Security Office helps us move fast without compromising security, resilience or control.
It protects our people, customers, data and technology while building security into the products, platforms and journeys people use every day.
And as a Cyber Security Engineer graduate, your work will be nothing short of impactful. You’ll work in the enabling layer of CSO, doing the hard yards of reducing cyber risk at every level. That includes designing and building controls, tooling, detection logic and securing systems that protect millions.

Two years. Real impact
Throughout this two-year scheme, you’ll go beyond just putting out fires. Your work will be centred on secure design, detection capability and risk reduction – as you build security into the bones of every system, platform and delivery process.
Expect to:
- Build and improve security tools and services that help us innovate and safely go faster
- Create solutions that protect customers, colleagues and data from cyber threats
- Automate repetitive tasks and security checks to make processes faster, simpler and more reliable
- Help keep critical systems secure, resilient and available when they are needed most
- Work across software engineering, cloud, infrastructure and DevOps to design and deliver secure technology solutions

What your work could look like
- Helping engineering teams embed security into every design and deliverable
- Taking our detection capability, response logic, rules, and controls to the next level
- Building secure infrastructure using code, laying strong and scalable foundations
- Improving the way we build, test and release pipelines (CI/CD)
- Automating the stuff that doesn’t need to be manual – reducing risk and room for error
- Contributing to a security-minded engineering culture

Skills you’d own
By the end of the scheme, you’ll:
- Get comfortable in the cloud learn how modern cloud technology powers secure digital services working with platforms such as Google Cloud and Microsoft Azure
- Build things that are safe from the start, using tools like Kubernetes, Docker, Terraform and CI/CD pipelines
- Use code to solve real problems, developing practical skills in Python, JavaScript, TypeScript, React and Node.js
- Explore how security works behind the scenes, from protecting sensitive information to identifying and responding to cyber threats
- Automate the repetitive stuff – to make security faster, simpler and more reliable with less risk and fewer mistakes
- Build skills that can keep up – because the tools, projects and cyber threats may change, but adaptable strong engineering thinking will always matter

Teams you’d touch base with
This is a role with real variety and impact. You’ll work with teams across different security labs and teams, gaining experience in everything from cloud security and cyber defence to AI, digital identity and threat protection. Along the way, you’ll see how different technologies, teams and security capabilities come together to help protect millions of customers, how they work together to protect the business and enable us to safely go faster.

What you’ll take away
- Being an expert in design discussions and risk-based decision making
- Going beyond prevention into detection thinking
- Taking automation, scripting and configuration-driven engineering head-on
- Mastering tools like Python, Terraform, Kubernetes, CI/CD pipelines, APIs, and data platforms

Support in your corner
You’ll get:
- Opportunities to acquire certifications in Google Cloud Platform and Associate Cloud Engineer.
- Access to the CSO Security Engineering Guild, where engineers connect, learn, share knowledge and build their skills together.
- Hands-on Tech Days where you’ll participate in Catch the Flag (CTF) challenges, hackathons, and real-world problem solving.
- Anchor Days across hub locations that bring colleagues together for hands on learning, collaboration and community building.
- Specifically curated Security Learning Pathways to support your skill build and bringing security skills to life.

Requirements
- While we do not require a set minimum degree achievement, we strongly recommend the ability to demonstrate sound knowledge, understanding and technical skills aligned to the role. Some aspects of this will be assessed through the application process.
- Note: We cannot sponsor visas.
- A strong foundation in Python coding, as it is the main language used across Security Engineering.
You’ll be based in London with option to work from other key hubs in Birmingham and Edinburgh plus other strategic locations. With our hybrid working policy, all colleagues are expected to spend a minimum of two days each week in the office, some roles are five days per week
Applications for our Cyber Security Engineer Graduate Scheme open on 10th September and close on 11th October.
Apply soon, as our schemes may close early if we receive a high number of applications.
Our application process is designed to help you shine. We want everyone to feel they belong and can be their best, regardless of background, identity, or culture.
Find details, including stages and tips for success, on our Graduate Application Process page.

