Security Engineer

Permanent
  • Post Date: April 29, 2024
  • Apply Before: May 31, 2024
Job Description

As the Security Engineer you will be reporting into the Head of IT Security and will assist with the translation of the Companies Information Security policies and standards into practical operational procedures. This role holder will work as part of the IT Security Team in areas including the design, implementation and maintenance of robust security measures across network and Cloud environments, ensuring protection against potential threats, adherence to industry standards, and proactive incident response. This will include providing security consultancy services to the Change Team on projects requiring it.

Role Responsibilities

– Provide domain expertise in the operationalisation of the companies Information Security Policies

– Ensure adherence with relevant Information Security Frameworks and Certifications

– Lead initiatives to design and implement security solutions for network and Cloud environments

– Work with External Security Partners

– Assess and Assure Security Posture of Material IT Suppliers

– Conduct risk assessments, analyse vulnerability and penetration testing reports.

– Provision Information Security training and awareness for colleagues across the Group

Skills & Experience Required

– Degree in Computer Science, Information Security, or related field (or equivalent experience).

– Advanced certifications (or working towards such a certification) such as CISSP, CISM, or equivalent are preferred.

– 5+ years in network and / or Cloud security roles, demonstrating progressive responsibility.

– Proven experience in designing and implementing security solutions in network and Cloud environments.

– Extensive experience in IT security, with a focus on Security Operations, Access Management, and Policy Development.

– Strong knowledge of security frameworks, such as NIST and ISO27000 series

– Up-to-date knowledge of emerging security threats, trends, and technologies.

– Expertise in network security protocols, Cloud security solutions (Azure/AWS/GCP), firewalls, intrusion detection systems, VPNs, etc.

– Proficient in vulnerability assessment tools, incident response frameworks, and risk management methodologies.

– Analytical mindset and problem-solving abilities to assess security risks and propose appropriate mitigation strategies.

– A basic understanding for compliance and risk management.

Salary & Benefits

The salary for this position is negotiable, dependent upon experience & qualifications and a full benefits package is included.