When you join EDF Trading, you’ll become part of a diverse international team of experts who challenge conventional ideas, test new approaches, and think outside the box.
Energy markets evolve rapidly, so our team needs to remain agile, flexible, and ready to spot opportunities across all the markets we trade in power, gas, LNG, LPG, oil, and environmental products.
EDF Group and our customers all over the world trust that their assets are managed by us in the most effective and efficient manner and are protected through expert risk management. Trading for over 20 years, it’s experience that makes us leaders in the field. Energy is what we do.
Become part of the team and you will be offered a great range of benefits, which include (location dependent) hybrid working, a personal pension plan, private medical and dental insurance, bi-annual health assessments, corporate gym memberships, an electric car lease programme, childcare vouchers, a cycle-to-work scheme, season ticket loans, volunteering opportunities, and much more.
Gender balance and inclusion are very high on the agenda at EDF Trading, so you will become part of an ever-diversifying family of around 750 colleagues based in London, Paris, Singapore, and Houston. Regular social and networking events, both physical and virtual, will ensure that you always feel connected to your colleagues and the business.
Who are we? We are EDF Trading, part of the EDF Group - a world leader in low-carbon, sustainable electricity generation.
Join us, make a difference, and help shape the future of energy.
Job Description:
Department
Information Technology (IT)
Position purpose
To act as a senior technical contributor within EDF Trading’s global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk.
The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation.
The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to EDF Trading’s cyber defence posture.
To support EDF Trading’s cloud security by advising on, reviewing and improving Microsoft Azure and 365 security controls.
Main responsibilities
Cybersecurity Domain Ownership & Improvement (30%)
Own one or more cyber security domains end-to-end, ensuring risks, controls, tooling, remediation activity and improvement backlogs are understood and actively managed.
Identify weaknesses, exposures and control gaps across assigned domains and drive resolution with the relevant technical owners.
Lead security improvement initiatives from analysis and design to implementation, documentation and operational handover.
Translate threat intelligence, MITRE ATT&CK techniques and observed attacker behaviours into practical control improvements.
Maintain clear domain-level documentation, including risks, controls, technical standards, operational processes and improvement plans.
Provide senior technical input into security roadmaps and control improvement activities.
Security Tooling Administration & Engineering (25%)
Administer, configure and continuously improve cyber security tools, including CrowdStrike, Zscaler ZIA/ZPA, and BeyondTrust Endpoint Privilege Management (EPM).
Improve security tooling effectiveness by tuning configurations, reducing noise, improving visibility and increasing operational value.
Design, build and deploy small tools, scripts, dashboards or automations to improve operations.
Support integration of tooling into workflows, reporting and incident response processes.
Maintain practical knowledge of Microsoft 365, Azure / Entra ID and Microsoft security controls, supporting improvements with the primary platform owners.
Use automation and AI-enabled workflows…