Cyber Security Engineer

GardPass Consulting; Huntingdon; On-site; GBP 50,000 - 90,000; Full time

Job description

No Clearance required

DV process will start upon selection

Location: Huntingdon, Cambridgeshire

Required (Core Skills)

1. Experience working in MOD or Home Office project environments
2. Strong knowledge of network and system security, including firewalls, IDS/IPS, micro-segmentation, and host security.
3. Hands-on experience with the following security products: Trellix, Ivanti, ClearSwift, Yubikey
4. Understanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS Top 25).
5. Expertise in identity and access management (IAM), including RBAC, ABAC, JWT and Cookie-based authentication.
6. Incident detection and response in MOD environments.
7. Security compliance and regulatory frameworks (e.g., NIST, CIS Benchmarks).
8. Experience working with Kubernetes at an administrative level

Soft Skills

1. Strong leadership and mentoring abilities.
2. Effective communication with development, operations, and security teams.
3. Ability to advocate for security best practices in a DevOps culture.

Desirable Skills

1. Containerization Security

• Expertise in Kubernetes security (e.g., RBAC, network policies, pod security standards, secrets management).
• Knowledge of container runtime security (e.g., container escapes, rootless containers, sandboxing).
• Image security best practices, including scanning, signing, and provenance verification.
• Secure deployment patterns using Tanzu & Kubernetes.
• Runtime security monitoring.

DevSecOps & CI/CD Security

• Secure CI/CD pipeline design with security testing using tools like Git and SonarQube.
• Implementation of Infrastructure as Code (IaC) security (e.g., Terraform, Ansible).
• Secrets management in CI/CD pipelines using Vault or Kubernetes Secrets.
• Security automation and policy enforcement using tools like GitHub Actions, GitLab CI, and Jenkins.

Cloud & Infrastructure Security

• Strong knowledge of cloud security principles in a containerised environment.
• Kubernetes security posture management (KSPM) using tools like Trivy.
• Secure ingress/egress controls, service mesh security (e.g., Istio).
• Encryption strategies for data at rest, in transit, and in use.
• Network security best practices for Tanzu container networking (e.g., NSX, Rancher).
• Compliance monitoring and security auditing for cloud-native environments.

Automation & Scripting

• Scripting skills in Python, PowerShell for security automation.
• API security knowledge (e.g., OAuth, JWT, API gateways, rate limiting).
• Experience with Security as Code for automated policy enforcement.