Security Engineer

Role overview Strengthen security across cloud, on-premises, vendor, and application environments, protecting systems and customer data while meeting compliance needs. The work combines architecture, hands-on engineering, risk assessment, incident readiness, and close partnership with development and operations teams.

Responsibilities - Design and maintain security architecture across cloud, on-premises, and third-party systems; assess and integrate security tools. - Add security checks to CI/CD workflows, review code, and guide teams on secure development and common application vulnerabilities. - Implement encryption and key management, and design identity and access controls using SSO and federation protocols. - Assess risks, threats, and vulnerabilities; coordinate mitigation and support audits against applicable security frameworks. - Improve monitoring and incident response with security operations teams, and advise colleagues on security practices.

Requirements - At least five years of security engineering experience, including development of governance, risk, and compliance-focused solutions. - Practical experience securing cloud platforms and cloud-native applications. - Experience with DevSecOps, CI/CD security, secure coding, and code review. - Knowledge of security frameworks and regulations such as NIST, ISO 27001, CIS Controls, GDPR, HIPAA, or PCI-DSS. - Hands-on familiarity with SIEM, IDS/IPS, vulnerability assessment, or penetration testing tools. - Strong understanding of cryptography, networking, firewalls, VPNs, and security monitoring; programming and infrastructure automation skills.

Nice to have Experience with SSO and identity federation standards such as SAML, OAuth, or OpenID Connect, and platforms such as Okta or Keycloak. Familiarity with SOC 2 and Cyber Essentials is also relevant.