The Security Engineer will report to Information Security Operations Manager and work with the Information Security Operations team for implementing and maintaining our security controls and tools. Work collaboratively with other departments to improve our security posture.
They will be specifically responsible for completing the implementation of a number of strategic based security solutions for new security tooling or existing.
The engineer will also participate in security related service management processes (incident, change and problem management) and will participate in the planning, design, enforcement and review of security controls.
The ideal candidate will have worked within an Insurance organisation or a similarly regulated company.
There will be an element of change, implementation or scheduled maintenance to be conducted outside of standard business hours. In the event of an IT Security emergency the security engineer may also be required.
Essential Duties and Responsibilities:
- Support the Information Security team to ensure continuous security improvement.
- Support and deliver secure design and implementation for the IT security maturity programme projects.
- Support the integration of new IT Security technologies. Introduce and integrate tools to enhance internal capabilities for routine security testing activities.
- Develop and deploy tools and automation to streamline common IT Security Operations tasks.
- Identify areas of cyber security improvement to ensure cyber security and data security by design controls.
- Collaborate closely with IT and Development teams to embed security-by-design principles into development processes.
- Conduct reviews of existing tools and processes, identifying gaps and implementing enhancements to strengthen our security posture.
- Perform security scanning and vulnerability management, taking proactive measures to reduce operational risks.
