Senior Security Engineer- Infrastructure

What will you be working on day to day?...

• Partner with teams across the organisation (infrastructure, application engineering, data analytics, etc.) to ensure the security, availability and resilience of our infrastructure
• Prior experience working closely with product and DevOps Engineers and/or SRE's on security requirements. Experience with DevOps environments and AWS security controls is a strong plus
• Architecture, configuration, operations, and maintenance of infrastructure, network and supporting software related to the cloud & application infrastructure
• Represent the Security Team in Firewall Change Review/ CAB meetings
• As a hands-on technical specialist, handle complex and detailed technical work vital to establish and maintain secure cloud security environments
• Assist Incident Response Team with SIEM engineering tasks
• Provide back-up on-call support to the Incident Response team
• Effective interpersonal skills, out-of-the-box thinking and ability to collaborate with all levels of staff
• 
  

The ideal candidate will have..

• Experience with building and operating secure infrastructures with 4 - 6 years in Information Security (DevSecOps is a plus).
• In-depth knowledge of TCP/IP networking (OSI stack, TCP, SDN, etc.).
• Experience with CI/CD tools such as Jenkins, GitHub Actions, etc.
• Experience using a programming language (would be a plus) such as python or Go for automation, plus Terraform, Chef, Puppet, Ansible, or CloudFormation
• Excellent communications and collaboration skills
• Previous experience and the ability to handle and manage change well within and outside the team
• Experience in platform security in at least three of the following domains: secure cloud deployment, application whitelisting, security engineering, incident handling, vulnerability analysis, active adversary threat management, penetration testing, intrusion detection, firewalls, and encryption technologies
• Familiarity with enterprise security controls and security best practices for Windows, Linux, and Mac systems.
• Proficiency in core security concepts, including cloud skills (preferred: AWS), networking and architecture