Security Engineer

About the Company

Requirements

• ● Minimum 3 - 5 years in security and/or relevant industry experience.
• ● Strong knowledge of Microsoft Sentinel, including configuration, rule creation, analytics, automation, and incident investigation.
• ● Excellent attention to detail and be able to identify potential security risks and/or vulnerabilities.
• ● Excellent written and verbal communication skills.
• ● Ability to build and maintain strong relationships with staff and suppliers.
• ● Ability to collaborate with other team members and effectively communicate security risks to non-technical stakeholders.
• ● Ability to define work schedules and work to timelines with minimal supervision.
• ● Experience with XaaS (IaaS, PaaS, SaaS, DBaaS etc) platforms.
• ● Understand the basic security principles, including network security, data security, encryption, access control, and authentication.
• ● Understand the network protocols such as TCP/IP, DNS, HTTP, and SSL.
• ● Understand the ISO27001 certification.
• ● Understand the ISMS process.
• ● Understand the threat detection and prevention systems.
• ● Understand the management and protection of sensitive customer data.
• ● Understand the concepts to secure various XaaS to align with policies.
• ● Knowledge of the evolving security risks introduced by modern AI systems and how to mitigate them.
• ● Basic understanding of Infrastructure Operations with Expert Operational Skills in Data Centre, Network, Security, Server & Storage Management.
• ● Willingness to learn and keep up to date with the latest security trends, techniques, and technologies.
• ● Flexible approach to working and the ability to adapt to new challenges and uncertainty.
• ● Holds an ITIL certification.
• ● Basic understanding of programming languages like Python, Bash, and Powershell and be able to write scripts to automate security-related tasks.
• ● Strong analytical skills and be able to troubleshoot security issues quickly and efficiently.
• ● Basic understanding of relevant security compliance regulations such as HIPAA, PCI-DSS, and GDPR.
• ● Basic understanding of cloud security best practices and be familiar with cloud platforms such as AWS, Azure, and GCP.
• ● Create, review and update policies and procedures.
• ● Conduct regular security assessments and testing to identify vulnerabilities and measure the effectiveness of security measures.
• ● Develop and implement security controls to mitigate security risks and threats, such as firewalls, intrusion detection/prevention systems, antivirus software, and access control systems.
• ● Manage and, where possible, automate security controls and reporting (vulnerability management, system hardening, logging and monitoring, system integrity, honeypots, source code reviews).
• ● Lead the operation, tuning, and continuous improvement of Microsoft Sentinel, including analytics rule development, log onboarding, automated playbooks, and incident investigation workflows.
• ● Ensure Microsoft Sentinel is fully integrated with key systems, data sources, and security controls to maximise detection coverage and response capability.
• ● Security administration activities including (but not limited to) the support of Firewalls, Web Security Gateways, Secure Email Gateways, Virtual Private Networks (VPN), Intrusion Detection Systems (IDS), other Secure Gateways/Proxys, Routers and Switches.
• ● Respond to security incidents and breaches, including conducting root cause analysis, implementing corrective actions, and ensuring that appropriate steps are taken to prevent similar incidents from happening again.
• ● Develop and maintain security policies, procedures, frameworks, and guidelines to ensure that the organization is compliant with applicable regulations and standards, such as ISO 27001 and NIST.
• ● Provide guidance and support to business units to improve the security culture of the organization through security awareness and training programs.
• ● Collaborate with cross-functional teams, such as IT, compliance, and risk management, to ensure that security is integrated into all aspects of the business.
• ● Prepare and maintain quality management documentation for security administration systems.
• ● Operate support to business stakeholders with security-related inquiries.

Benefits

• ● Incredibly flexible working arrangements.
• ● Tailored leave options - competitive parental leave, cultural leave swap, volunteer leave, study leave etc.
• ● A genuine focus on personal and professional development - including a combination of incredible internal Leadership Development Programs, peer to peer learning and self-chosen learning opportunities.
• ● Up to 1,000 per year for you to choose how you spend through our much loved BestYou program.
• ● An ongoing commitment to Diversity and Inclusion.
• ● Supportive wellbeing initiatives including access to our Employee Assistance Program.
• ● A dedicated internal events team focused on bringing a mix of educational, social, celebratory, and philanthropic activities,
• ● A generous bonus scheme - if we win, you win And we like to win