Security Expert

As an Information Security Engineer, you'll play a crucial role in shaping and maintaining our information security strategy, policies, controls, and procedures. Your primary objective will be to enhance the overall security posture of the business by implementing robust security measures and continuously seeking opportunities for improvement.

This role is ideal for someone with experience in collaborating with various stakeholders to understand their business requirements and working closely with IT teams to enhance the security environment.

• Vulnerability Assessment: Conducting thorough assessments of IT systems to identify security weaknesses, evaluating these vulnerabilities, and effectively communicating findings to relevant stakeholders.
• Threat Intelligence: Analyzing diverse sources of threat intelligence, consolidating the analysis, and disseminating the insights to key stakeholders to enhance awareness and preparedness.
• Application and Data Security: Implementing measures to safeguard applications and data, ensuring confidentiality, integrity, and availability are maintained at all times.
• Identity and Access Management: Establishing and maintaining robust access control mechanisms to safeguard systems, defining access privileges, control structures, and resource allocations.
• Incident Resolution and Monitoring: Responsibly handling security incidents and monitoring the IT estate using various monitoring tools to detect and respond to potential threats promptly.
• Security Infrastructure Configuration and Troubleshooting: Configuring and troubleshooting security infrastructure devices such as firewalls, security appliances, and computer systems to ensure optimal functionality and protection.
• Technical Solutions Development: Developing innovative technical solutions and security tools to mitigate vulnerabilities effectively and automate recurring security tasks, enhancing overall security posture.
• Reporting: Generating required reports related to security, including weekly/monthly key performance indicators (KPIs), key risk indicators (KRIs), project updates, and other relevant metrics.
• Continuous Learning and Awareness: Staying abreast of the latest security news, trends, and emerging vulnerabilities, and actively seeking opportunities to enhance knowledge and skills in the field of cybersecurity.

• Deployment and Configuration of Perimeter Defence Mechanisms: Proficiency in deploying and configuring perimeter defence mechanisms to safeguard networks and prevent unauthorized access, ensuring robust protection against external threats.
• Expertise in Microsoft 365 Environments: Extensive knowledge and experience working with Microsoft 365 environments, including Office 365, Azure Active Directory, and associated services, enabling effective management and security of cloud-based platforms.
• MS Endpoint Implementation Experience: Hands-on experience in implementing Microsoft Endpoint, Microsoft's cloud-based service for mobile device management (MDM) and mobile application management (MAM), facilitating secure management of devices and applications across various platforms.
• Strong Knowledge of Checkpoint Technologies: In-depth understanding and proficiency in Checkpoint technologies, including firewall solutions and security management platforms, ensuring effective network security and threat prevention.
• Experience with Vulnerability Management: Familiarity with Vulnerability Management technologies, practices, and procedures, such as Qualys, to identify, assess, prioritize, and remediate security vulnerabilities across IT environments, enhancing overall security posture.
• Technical Proficiency in Windows and Linux Environments: Good technical knowledge and experience working with both Windows and Linux environments, enabling effective management, configuration, and security of systems running on these platforms.

You should have good all-around security mindset with a can-do attitude, ability to approach security challenges with a proactive mindset and a positive attitude, always striving for solutions. You should also have demonstrated ability to work independently, taking initiative and driving security initiatives forward without constant supervision.

Possession of one or more relevant certifications, such as CEH, CCSLP, CCSK, SANS GIAC, SSCP, MCSE, MCSA, CISSP, CISA, or CCSP would be highly beneficial.

At least three years of hands-on experience in information security-related roles and relevant qualifications in Computer Science, Cyber Security, or Forensic Computing providing a strong foundation for understanding and addressing security challenges.

We offer a competitive salary and benefits package, including opportunities for professional growth and development in a dynamic and supportive work environment.

We are committed to providing a safe and inclusive workplace, promoting diversity and equal opportunities for all employees. We strive to create a culture that values creativity, innovation, and teamwork, where everyone feels empowered to contribute their best ideas and skills.