Senior Security Engineer

Join our team as a Senior Security Engineer, where you will lead the design, implementation, and continuous improvement of security engineering practices across various environments. You will drive security-by-design principles, DevSecOps integration, and cloud/platform hardening while providing technical leadership across the organization. Your responsibilities will include defining and implementing security principles, conducting risk assessments, enhancing security posture, developing hardening standards, and collaborating with various teams to embed security practices. You will also stay current on emerging threats and security technologies.

• Lead the design, implementation, and continuous improvement of security engineering practices across cloud, on-premise, and hybrid environments.
• Define and implement security-by-design principles across cloud, on-premise, endpoint, and network environments, and embed security into CI/CD pipelines.
• Conduct and lead security risk assessments, ensuring mitigation strategies are implemented across new applications, platforms, and third-party tools.
• Bachelor’s degree in computer science, Cybersecurity, or related field
• Experience designing and implementing enterprise scale security principles
• Experience with security frameworks (NIST, ISO/IEC 27001, NIS2 TISAX)
• Strong technical knowledge of software development (CI/CD pipeline), cloud and security by design ways of working
• 8+ years of experience in cybersecurity or information security roles
• Proven ability to influence and work with cross-functional teams and departments
• Hands on experience with end user and cloud security (Azure, AWS, Windows and MAC O/S)
• DevSecOps and CI/CD security integration (SDLC)
• Workflow Automation & AI adoption
• Cloud security (Azure & AWS)
• Stakeholder management & technical leadership
• Security frameworks & compliance (ISO 27001, NIST, NIS2, TISAX)
• Security architecture & Zero Trust principles
• Microsoft Azure (E5 Toolset) - Defender for Cloud, Defender for Endpoint, Defender for Identity, Microsoft Purview
• Vanta (GRC)
• SonarCloud (SAST Tooling)
• AWS Security Hub (CSPM), Amazon Guard Duty, AWS Inspector, AWS Identity Analyser, AWS Config
• Atlassian Cloud (Confluence / Jira)
• Strong Microsoft Office 365 knowledge
• ISC2 - CISSP/CCSP/CSSLP
• GIAC GSSP/ GCSA
• Microsoft Azure Security Engineer Associate (AZ-500)
• Microsoft Cybersecurity Architect Expert (SC-100)
• AWS Certified Security - Specialty