Senior Security Engineer

Key Responsibilities include:

·         Technical depth and knowledge across multiple areas including

o Endpoint Security, Network Security, Mobile Device Security – Development and / or governance of security solutions on endpoints and servers, mobile devices and the network e.g. firewalls, IDS/IPS, WAF.

o Data Security – Development and / or governance of security solutions for data security such as DLP and data classification & labelling tools

o Cloud Native Security - Designing and implementing security for cloud-based resources covering access management, data security, monitoring to ensure that they are aligned with business requirements

o Application Security - Embedding security within the development process using manual and automated security controls

·         Support security architecture decisions

·         Implement technical security controls and process improvements, collaborating on security roadmaps and strategies

·         Cross functional team collaboration and co-ordination with

o Enterprise & Security Architecture, Innovation & Analytics, IT Operations and Cyber Resilience teams

o IT Operations and Software Development teams to design and build secure solutions and services in standardized manner

·         Performing threat modelling and configuration review of security applications, systems, and services as required

·         Support complex security projects and solutions, handle issues that require in-depth knowledge across multiple technical areas 

·         Continuously improve ICON’s cyber detection and response capability

·         Ability to relate technical issues to non-technical associates / business owners

To be successful in the role, you will have:

·         Desire for role requiring both hands on expertise and working with other teams to achieve required outcomes

·         Demonstrate a strong awareness of the current threat landscape. Experience building threat models and reviewing and / or configuring technical security or network solutions.

·         Demonstrate a strong technical background in Enterprise Security controls and solutions covering one or more of Cloud, Application, Network, Mobile Device, Data Security and OS

·         Certifications: Relevant certs e.g. ISC2 CISSP, ISACA CISM/CISA/CRISC, SANS SEC4XX/5XX

·         Nice to have:

o Hands-on cloud experience, with one or more certifications

o Experience analysing or evaluating security solutions

o One or more relevant security / network solution qualifications

o Security Engineering or Operations experience