Security Engineer

Security Engineer required for global organisation with HQ in Redhill; Surrey.

Main Purpose of Job

• Developing the information security plans and policies for the company and Customers working with Security Management and Compliance functions to embed security management plans into operational practice
• Implementing protections and solutions to ensure and enforce the information security plans and policies
• Monitoring and collating information from monitoring tools as well as third parties to provide an accurate view of the current security position of the organisation and customers including security events, ongoing risks and treatment plan
• Investigation and resolution of security incidents events logged by staff members, monitoring tools and security partners.
• Educating and advising team members on the handling security threats e.g. suspicious emails, security alerts, CVE, etc.
• To have responsibility for the through life security of both internal and customer networks/systems as required by the company testing for vulnerabilities and recommending improvements.
• To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective.
• Creating documentation around policies, procedures and events.

Technical expertise:

• Security
• Be the centre of excellence for network and device security
• Lead by example and develop and maintain personal and group technical expertise in company bespoke products and security ensuring integrity and security of networks;
• Good working knowledge & experience of
  • Cisco Firewalls, Routers&Switches,
  • Compliance standards (ISO27001 and ITIL)
  • Security tools sets (SIEM, IDS/IPS)
  • Pen Testing tools
  • Vulnerability Management
• Design, build, test, commission and troubleshoot security solutions (IDS/IPS, SIEM) on internal and customer networks
• Experience developing and maintaining policies, procedures, standards and guidelines
• Write and maintain configuration/reconfiguration documentation, schematics, support guides and other documentation as required.
• Share knowledge, train, support and develop individuals internally on security management
• Work across the IT, Enterprise and Hub Engineering teams in support of own and customer networks.

Experience/Skills/Qualifications:

• A minimum of 5 years multi network exposure including hands on experience of designing and managing secure networks including the following systems:
  • Cisco Firewalls, Routers, Switches
  • Juniper platforms
  • SIEM tools
  • IDS/IPS
  • Penetration testing (PEN Testing)
  • Computer Forensic tools
  • ISO27001 & GDPR knowledge
• Ability to communicate network security issues to peers and management
• Ability to absorb and quickly gain and retain knowledge of bespoke products & satellite services
• Must be able to demonstrate technical competency in all they do with a right first time, every time attitude.
• Excellent customer support skills and ability to interact with customers both on the phone and in meetings
• Must hold, or have the ability to easily achieve SC Security Clearance.
• A well organised, pro-active and can-do attitude.
• Effective communicator with an eye for detail and accurate planning skills

Desirable:

• Telecommunications background
• UK MOD/Government networks experience.

Point of contact:

To support the IT Manager and IT team in ensuring the highest levels of network and device security.

• To be the key expert in CyberSecurity Design/Management for the company and customers as required
• Final point of contact for security issues including trouble shooting and resolving to sometimes tight timescales.
• Be involved within the company Incident Management scheme.
• To liaise with other departments as required to ensure full support of networks and knowledge.
• Providing appropriate technical advice regarding complex cybersecurity problems.
• Following up and driving issues through to satisfactory completion.
• Identifying training needs to ensure consistency of service
• Appropriate planning of maintenance and outage