Overview
Design, build and run the security controls that protect applications, infrastructure and data.
What you'll do
- Design and implement security controls across networks, endpoints, cloud and applications
- Run vulnerability management from scanning through remediation
- Configure and tune security tooling such as EDR, SIEM and firewalls
- Respond to security incidents with operations and engineering teams
- Harden systems against agreed security baselines
- Advise delivery teams on secure design and configuration
- Document controls and evidence for audits
What you bring
- Hands-on security engineering experience
- Network, endpoint and cloud security fundamentals
- Vulnerability management tooling such as Tenable, Qualys or Rapid7
- SIEM and log analysis such as Splunk, Sentinel or QRadar
- Identity, encryption and key management concepts
- Scripting in Python, Bash or PowerShell
You don't need every item on this list. If most of it fits, send your CV.
Nice to have
- CISSP, Security+ or a cloud security certification
- Threat modelling
- Incident response playbooks
- Regulated-industry experience