Senior Security Engineer

Description

The Senior Security Engineer will have a passion for cyber security along with a desire to relentlessly champion best practices.  The role is responsible for implementing, configuring, and guiding the evolution of the security technology portfolio. 

The Security Engineering team sits within the Advanced Threat Engineering operation which forms part of the wider Information Security Operations team (SOC (Security Operations Centre), Incident Response, Forensics, and Threat Intelligence).  This is a proactive role, and the successful candidate will have strong analytical and troubleshooting skills and a desire to learn new technologies.

Responsibilities

The Senior Information Security Engineers will:

• Manage technical escalations to a successful resolution.
• Raise awareness of security policies and develop corresponding procedures.
• Analyse business needs, research, and recommends solutions, drive adoption of the best ones.
• Take a threat led approach to generating mitigation and countermeasures.
• Identify and lead maximising security value from existing investments.
• Understand the key risks the organisation faces, the key tactics techniques and procedures that likely threat actors will exploit and create control boundaries to intersect these domains.
• Work collaboratively with the wider Information Security team.  This would include working with: The Incident Response team, assisting with incidents and enhancing Incident Response tooling; Security Architecture to ensure that any existing constraints are overcome within forward looking plans; and with the Security Risk Consultants to provide additional technical knowledge.
• Take a leading role in post incident reviews and propose engineering resolutions to improve results in any future recurrence.
• Champion best practice methods for web application hosting and protection, endpoint management and software defined protection.
• Design, produce and continually improve Management reporting.
• Monitor the capacity of security tooling & supporting infrastructure and project future capacity for security products.
• Recognise that telemetry for security products will increasingly be curated in the cloud and be prepared to develop API endpoints and connections to collect and collate this knowledge.
• Establish and manage relations with vendors and related equipment suppliers.
• Participate in the Information Security On-Call rota.
• Triage security issues and provide recommended fixes.
• This position is an active member of the business Change Advisory Board.

Essential Experience & Skills

• Five or more years delivering information security infrastructure support and related services with a minimum of 10 years IT experience
• Highly responsive and proven professionalism in communication, interpersonal, analytical, and organizational skills
• Strong technical background is required with knowledge of managing, supporting, and creating policy for at one or more of the following areas:
  • Internet Filtering
  • Email Filtering
  • Endpoint Detection and Response
  • Host Based Firewalling, HIDS/HIPS
  • Antimalware
• The ability to pick up and learn new technology approaches and make rapid decisions on the best way to use these technology advancements for the betterment of the overall security posture.
• Excellent communication skills as the ability to communicate effectively, constructively, confidently, and professionally is key to the success in the role as is the ability to work with IT and Information Security teams and the wider business.
• An excellent knowledge of Information Security principles and an understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks.
• Keen attention to detail and excellent analytical skills.
• Ability to actively manage workloads to meet business and department requirements.
• Strong process-oriented individual with experience in ITIL concepts

Desirable Skills

• One or more technical Information Security Certifications such as:
  • CISSP
  • CompTIA: Security+
  • GIAC Certification: GCED
• Degree in an Information Security / Computing discipline
• Familiarity with a programming or scripting language
• Familiarity with regex / regular expressions
• Experience working within in an Agile framework
• Experience with at least 1 of the main cloud vendors (Amazon Web Services, Azure, Google Cloud Platform)
• Experience with DLP
• A working knowledge of financial services and the typical business processes involved together with the threat actors and their relevant tactics, techniques and procedures would be of significant advantage.

About Admiral

We're Wales’ only FTSE 100 company. We have forward-thinking approaches and provide endless opportunities to test, learn and grow. There's a reason we've been named a Best Place to Work: our progressive culture, core values, and commitment to diversity and inclusion have created a working environment where people share ideas, aren’t afraid to speak up and change things, and above all, feel valued.

Admiral has grown from being a small start-up into a multi-national organisation. The company is constantly investigating new products, services and markets and is now present in eight countries with a diverse product portfolio.

Our success goes hand-in-hand with having a strong culture where we put our people and customers first. Our philosophy is simple yet effective: people who like what they do, do it better, and this, in turn, means that our customers receive the level of service and products that they deserve. Our culture is honest, open and wholeheartedly focused on four key areas:

Communication, Equality, Reward & Recognition, and Fun.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we're voted no. 1 in the 2019 Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

You can also view some of our other key benefits here; https://admiraljobs.co.uk/employee-benefits/.

If you think this role is for you and would like to be considered for this opportunity, please click “apply now” to complete an online application form.

#LI-LP1