The Information Security Design and Engineering Team are responsible for the design, engineering, technical delivery, maintenance and improvements of the systems and applications for the Information Security Office. We are expected to add value by improving these tools through tuning, enhancements, and improved adoption. Working alongside the other areas of Technology and the Information Security Office, we ensure that solutions delivered meet industry best practice and compliance requirements.
As an Information Security Engineer, you will be responsible for the development and updating of systems or products, in conformance with agreed security requirements and standards, throughout its lifecycle. You will document the technical designs, implementation and tuning of a combination of security controls to balance prevention, detection, response and useability. This could involve detailed technical design, coding, or hardware prototyping, debugging and documentation.
Key Accountabilities:
- To proactively protect client in engineering secure solutions from inception to retirement, reducing the risk of a cyber event impacting customers, colleagues or reputation.
- Development of information security products using components, tools, techniques, and methodologies which minimize the chance of creating vulnerabilities in the products
- Integration of security products into more complex systems, including cloud-based systems
- Produce documentation on the products and services to guide implementers, system operators and administrators and, sometimes, end users
- Review and process incoming engineering requests from Cybersecurity stakeholders, as well as being part of the team in testing and implementing technology configuration changes and updates.
- Work with other areas of the information security team with subject matter experience, resolution of issues and transfer of knowledge through training, support materials and workshops
- Provide technical guidance and leadership for at least one of the products within the cyber portfolio, really be the expert for a system we manage
- Provide out of hours support as part of a rota.
Experience:
In order to succeed in this role, it is expected that you will have experience in:
- Working within information security operations and engineering functions
- Development and documentation of detailed designs
- Cyber security and data protection regulations
- Cloud development techniques
- Configuring and implementing software and hardware security components, including cryptographic solutions
- Secure development standards, such as Security Development Lifecycle
- 'Agile' techniques and methodologies, such as SCRUM, SAFe, continuous Development, Continuous Integration and Continuous Testing
- Mentoring and people development
Knowledge and experience in one or more of the following areas:
- Identify & Access Management
- Endpoint Protection
- Network Security
- Office 365 & Email Security
- Application Security
- Cloud Platform Security
- Operational Technology Security
