The Fidelis Partnership is a leading privately-owned, Bermuda-based Managing General Underwriter, which, through its subsidiaries, is a global underwriter of property, bespoke and specialty insurance and reinsurance products. The Fidelis Partnership is one of the largest Managing General Underwriters globally and its operations also include outwards reinsurance, claims handling, exposure management and portfolio analytics. The Fidelis Partnership also sponsors and incubates specialist MGAs through its Pine Walk platform. The Fidelis Partnership is separately owned and managed from the ownership and management of Fidelis Insurance Group.
Across product lines and geographies, we focus on three diversified pillars: reinsurance, specialty and bespoke solutions. We are truly diversified. Our long-standing partnerships with capital providers and quota share partners make us nimble. Our breadth of expertise and capabilities deliver outstanding market returns.
The role
The Senior Cyber Security Engineer will strengthen the organisation’s hands-on security engineering capability during a period of significant security maturity uplift. The role focuses on operationalising the deployed security tooling estate, executing the security remediation backlog, and producing control evidence to an audit-ready standard. The Senior Cyber Security Engineer will work closely with the Head of Cyber Security, infrastructure and IT operations teams, the outsourced SOC provider and third-party delivery partners to ensure security platforms deliver managed, measurable and evidenced protection aligned with regulatory expectations and recognised frameworks.
Key accountabilities
Security Platform Operationalisation:
Operationalise and tune the deployed security tooling estate, including CrowdStrike Falcon (EDR and Next-Gen SIEM), Wiz CSPM (Azure and AWS), Mimecast and the Microsoft security stack, moving platforms from deployed to fully managed through detection rule tuning, alert configuration, log source onboarding and compliance policy enablement.
Triage and disposition security alerts across SIEM and EDR platforms, reducing alert backlog and improving detection fidelity through systematic investigation, rule refinement and false positive tuning.
Support the implementation and tuning of identity and access controls, including Conditional Access policies, break-glass procedures, privileged access management and identity hygiene remediation such as shared account rationalisation, credential rotation and dormant privileged account deactivation.
Vulnerability Management and Remediation:
Execute the security remediation backlog, prioritising and remediating vulnerabilities hands-on and coordinating remediation activities with infrastructure and IT operations teams through agreed change processes.
Support patching governance and remediation tracking, ensuring critical findings are addressed within defined SLAs, and progress is evidenced for monthly reporting.
Deliver secure configuration and compliance reporting across the estate, supporting a measurable uplift in security maturity against NIST CSF.
Security Operations and Incident Response:
Act as the second cyber escalation point within the 24/7 security operating model, providing technical investigation, containment and response as part of the cyber on-call rota and supporting post-incident reviews.
Onboard and manage the day-to-day relationship with the outsourced SOC/MDR provider, establishing operational handover processes and driving improvement in detection and response performance (MTTD/MTTR).
Provide security input to change and architecture governance (CAB/ARB) and produce engineering documentation, runbooks and control evidence to an audit-ready standard.
Skills & experience
Extensive hands-on experience of security engineering, security operations and tactical security remediation delivery in live enterprise environments.
Strong hands-on experience with CrowdStrike Falcon, including console management, detection rule creation and tuning, host investigation and response actions.
Experience operationalising SIEM, EDR/XDR and vulnerability management platforms (for example CrowdStrike Next-Gen SIEM, Microsoft Sentinel or Microsoft Defender), including detection tuning, alert management and vulnerability scanning and reporting.
Microsoft security stack experience across Entra ID, Active Directory and Group Policy, Defender and Microsoft 365, with email security (Mimecast or equivalent). Exposure to Microsoft Purview is desirable.
Cloud security experience across Azure and AWS, including cloud security posture management (Wiz or equivalent).
Demonstrable delivery of security maturity uplift against recognised frameworks such as NIST CSF and CIS Benchmarks, evidenced through measurable posture improvement.
Experience onboarding or managing an outsourced SOC or managed security service, including operational handover and improvement of detection and response performance.
Incident response experience, including out-of-hours working, with an evidence-focused working style and documentation that stands up to internal audit and external assurance.
Experience in regulated financial services; insurance or Lloyd’s market experience and DORA awareness are desirable. Relevant certifications (such as ISC2 or Microsoft security and compliance certifications) are desirable.
Other
The Fidelis Partnership Ethos
At The Fidelis Partnership, we aim to be different while making a difference.
We set the standard for quality in our industry. Guided by our expertise, our clients can take unique and material risks with confidence.
Our approach is tailored and designed to deliver excellence for our clients. We are trailblazers, creating unique solutions in the (re)insurance space.
We are experts. Our brokers and clients value the depth of our knowledge and experience. We leverage state-of-the-art underwriting technology to be a market leader.
We believe sound ethics make for good business. We deliver value for our customers, investors and communities while actively avoid trading with industries that cause harm to people, the environment and animals.
We pride ourselves in creating a workplace that prizes execution, meritocracy, Diversity & Inclusion. Our people herald from countless backgrounds and are united by ambition and the unabashed desire to deliver excellence every day. We provide a competitive environment that helps people cultivate themselves professionally and personally and balance a rigorous workplace with a mindset that prioritises environmental and charitable activities in our communities worldwide.
Our ethos dictates our decisions and actions. It unites us as a team of experts and colleagues and provides us with a compass for ensuring we deliver our best to every stakeholder we serve.
Diversity, Equity & Inclusion
Diversity & Inclusion in the workplace
Insofar as possible, we aim to ensure the composition of our workforce reflects the make-up of the local community
We have specific programmes in all our offices to support diversity within the hiring process, e.g. internship and scholarship award programmes
This is a particular focus in Bermuda, where we engage actively with local organisations to source diverse talent and provide coaching/mentoring for underrepresented groups
We aim to maintain a focus on equal opportunities across all stages of hiring process
We measure and minimise the pay gap where possible.
Bring Your Whole Self to Work
Our vision is for a workplace culture where differences are valued and where diversity of background, experience and thought are welcomed. We want to create an environment where all employees, regardless of who they are, are given equal opportunities for career progression and enjoy fair reward from their and The Fidelis Partnership's successes. This will be driven by a workforce that embraces Diversity & Inclusion at every level, in every department across The Fidelis Partnership.
To ensure that all candidates have a fair opportunity to show their abilities during the recruitment process, adjustments may be required. If your physical or mental health or disability may necessitate an adjustment, please contact fidelis@avenciaconsulting.com to discuss. All information relating to your health or disability will be treated in accordance with our data protection policy.
