Security Engineer Job Description

We are looking for a Security Engineer to protect our systems, applications and data. You will design and implement security controls, find and fix vulnerabilities, and respond to incidents. You will work with engineering, infrastructure and compliance teams to make secure choices the default for everyone.

Responsibilities

• Design, implement and maintain security controls across applications, networks and cloud environments
• Perform vulnerability assessments and penetration tests and track the fixes to completion
• Review architectures and code for security weaknesses and advise development teams
• Monitor logs and alerts, investigate suspicious activity and respond to security incidents
• Manage identity and access, secrets, encryption and key management
• Automate security checks in build and deployment pipelines
• Contribute to security policies, risk assessments and compliance work
• Write incident reports and lessons learned and improve detection and response
• Raise security awareness through guidance and training for colleagues
• Follow new threats and vulnerabilities and recommend practical protections

Requirements

• Degree in computer science, information security or a related field, or equivalent experience
• Experience in security engineering, security operations or a closely related role
• Good knowledge of networking, operating systems and web application security
• Experience with a major cloud platform and its security services
• Scripting or programming skills, for example in Python or Go
• Familiarity with security frameworks and standards such as ISO 27001 or NIST
• Analytical thinking, discretion and clear communication with non-specialists

Nice to Have

• Recognised security certification
• Experience with threat modelling and secure development practices
• Experience with incident response or digital forensics
• Experience with security tooling such as SIEM and vulnerability scanners