Cyber Security Engineer II safeguarding systems at MSK, involved with complex technologies in cancer care security. Lead threat investigations and apply technical knowledge for security improvements.
About the role
- Security Engineer specializing in design and implementation of technical security for cloud platforms at a UK data and software company. Focus on enhancing security controls across multi-tenant environments with a hands-on approach.
Responsibilities
- Provide security engineering services as a member of the overall platform engineering service team
- Secure all cloud infrastructure from both a deployment and detection standpoint
- Coordinate and advise other team members on security approaches and industry best practices
- Coordinate with MOD Security Authorities on risks and appropriate technical control options
- Design, implement, manage and continually improve service-wide cloud security controls using the inherent / new security products and features provided on the existing hosting platform(S)
- Architect and enforce Zero Trust and least-privilege models (RBAC, PBAC), restrictions, and platform security controls
- Monitor security control effectiveness and drive continuous improvement of cloud hosting security governance
- Ensure all technical security measures from the boundary to the tenant applications are optimal and exceed the MOD specified minimum base security requirements
Requirements
- Experience with on-premises Security Information and Event Management (SIEM) systems (e.g., Fortinet, Splunk, Elastic)
- Ability to enhance, operate, and manage SIEM services for multi-tenant cloud platforms
- Skills in event triage, escalation, and incident investigation, including collaboration with tenants and central SOC teams
- Familiarity with real-time threat detection, monitoring, and alerting across network, boundary, hosting, and application layers
- Hands-on experience with VMware Cloud Foundation (Incl. Aria operations and NSX-T) and related technologies in air-gapped or restricted environments
- Security best practices, system and OS level security hardening (CISCAT, NIST benchmarking etc) security vulnerability scanning tools such as Nessus
- Experience with infrastructure as code (IaC) tools (e.g., Terraform, Ansible, Packer) and containerization (e.g., Kubernetes, Tanzu) is desirable
- Ability to assist with Business Continuity Planning, Risk and Asset management and AI Security is desirable
- Understanding of MOD security compliance, including UK Security Levels, Secure by Design and NIST frameworks
- Experience in delivering and supporting accredited solutions at multiple classification levels
- CI/CD pipeline security and DevSecOps methodologies
- The successful candidate must be eligible to obtain and maintain a SC level security clearance, DV clearance is preferred.
Benefits
- Annual Leave: 25 days plus your birthday off, with the ability to buy or sell up to five additional days
- Private Healthcare: Comprehensive coverage with additional options for family members
- Training & Skills Development: Ongoing learning opportunities to help you advance your career
- Fitness Reimbursement: Support for gym memberships or fitness-related expenses
- Life Assurance: Extensive life insurance coverage for peace of mind
- Pension Contribution: Competitive options to help you plan for a secure financial future
- Perkbox Subscription: Discounts on a wide range of products and services
- Flexible Work Arrangements: Designed to support work-life balance and personal commitments
- Internal Reward Schemes: Recognition initiatives to celebrate your contributions and achievements
- Community Engagement & Volunteering: Opportunities to support meaningful causes through company-sponsored programs
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Principal Security Engineer working on network security lifecycle and threat management for Verizon’s 4G/5G Cloud Networks. Collaborating with multiple teams to enhance cybersecurity posture.
Cybersecurity Engineer at Verizon responsible for security lifecycle and effectiveness across networks. Leading incident response and vulnerability management in a hybrid work role.
Director of Security and Compliance safeguarding digital assets and data with a focus on cybersecurity and compliance. Leading risk management, stakeholder engagement, and team leadership initiatives.
Information Security Risk & Compliance Analyst supporting the maintenance of ISO 27001 standards. Contributing to risk assessments and compliance across AAB’s Business Protection Team.
Information Security Risk & Compliance Analyst at AAB managing compliance with ISO 27001, supporting enterprise risk assessments and enhancing information security systems.
Information Security Risk & Compliance Analyst at AAB focusing on ISO 27001 compliance and information security management. Collaborating across teams to ensure robust risk and compliance frameworks.
Security Principal at Optiv designing AI security solutions for clients, leveraging advanced security services and technologies. Driving pipeline generation and maintaining strong client relationships as a trusted advisor.
Cloud Security Architect supporting federal customer projects focused on architecture and security solutions. Conducting risk assessments and defining security requirements within a cloud environment.
Information Security Specialist responsible for enhancing cybersecurity posture through incident management and compliance. Collaborating with cross - functional teams to monitor threats and implement security measures.