Information Technology - Cyber Security Engineer (Architecture and Engineering)

Job Description
You will be a member of the Group Information Security Team responsible for initiating, implementing and maintaining security products and solutions to support enterprise security.

Key Responsibilities

1. Subject matter expert (SME) for the security systems owned by the Information Security Team.
2. Ensure security systems are utilised to their maximum capabilities.
3. Plan, identify, assess, design, operationalise and maintain multiple security related software and/or hardware.
4. Recommend and drive cyber security solution and initiatives to improve cyber security of the organisation.
5. Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.
6. Provide security consultancy, technical guidance, expertise, solutioning and education.
7. Advise infrastructure teams on security design that is relevant and fit for purpose.
8. Identify and assess cyber risks in the IT infrastructure environment.
9. Review firewall requests.
10. Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.
11. Any relevant ad-hoc duties. Manage individual project priorities, deadlines and deliverables.
12. This is an individual contributor role. Deliver tasks with minimal supervision.
13. Strong communication skills.

Requirements

1. Degree in IT or related field, with at least 5 years in information security, especially in the application security space.
2. Professional security certifications (CISSP, CSSLP, CEH etc) preferred.
3. Experience in security products POC and RFQ.
4. Prior experience in implementing and maintaining any of tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM etc. and/or network security. Able to review firewall requests.
5. Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography etc.
6. Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience preferred.
7. Knowledge of cyber security threats, vulnerabilities, hacking and exploit methods etc.
8. Strong oral, written, presentation and inter-personal skills.
9. Possess positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.
10. Able to work independently and in a team-oriented, collaborative environment.