SL2472 - Information Security (Security Engineer)

Role Overview

We are seeking an Information Security Security Engineer to support the implementation, operation, and continuous improvement of cybersecurity controls and security infrastructure.

The role covers security engineering, monitoring, cybersecurity architecture support, security tools, AI/ML security, and emerging security technologies such as Post-Quantum Cryptography (PQC).

Key Responsibilities

Security Engineering & Controls

• Develop, implement, and maintain security measures to protect organisational data, applications, systems, and network infrastructure.
• Track, monitor, and report on the effectiveness and performance of implemented security controls.
• Identify, document, and maintain system security requirements.
• Prepare technical documentation and provide technical input on security solutions and controls.
• Analyse security systems to identify vulnerabilities, weaknesses, and opportunities for improvement.
• Implement preventive controls to reduce cybersecurity risks and strengthen the overall security posture.

Cybersecurity Architecture & Strategy

• Maintain a strong working knowledge of the organisation's cybersecurity architecture.
• Support the execution and enhancement of cybersecurity strategies aligned with organisational objectives and industry practices.
• Collaborate with relevant technology and security teams to implement security architecture requirements.
• Support security assessments and provide recommendations for new and existing systems.

Security Infrastructure & Operations

• Configure, troubleshoot, maintain, and support security infrastructure across hardware and software environments.
• Monitor systems and security platforms for suspicious activities, anomalies, potential breaches, and intrusions.
• Support the operational management and continuous improvement of security technologies.
• Support security solutions including Email Security, Intrusion Detection and Prevention Systems (IDPS), Attack Surface Monitoring, Anti-Malware, Web Application Firewall (WAF), Certificate Management Systems (CMS), and AI Security Operations.
• Troubleshoot security technology issues and work with relevant teams or vendors to resolve technical problems.

AI & Machine Learning Security

• Support the implementation of security controls for AI and Machine Learning systems.
• Protect AI/ML data, training environments, model deployment processes, and inference endpoints.
• Identify and support the mitigation of AI-related security risks, including adversarial attacks and data poisoning.
• Support the development and improvement of security practices for AI-enabled platforms and applications.

Post-Quantum Cryptography (PQC)

• Support Post-Quantum Cryptography readiness initiatives.
• Monitor developments in quantum-resistant cryptographic technologies and standards.
• Support crypto-agility initiatives and assess potential impacts on TLS certificates and digital signatures.
• Contribute to migration planning and implementation of hybrid and quantum-resistant cryptographic solutions.

Project Support & Security Awareness

• Support cybersecurity projects by tracking activities, deliverables, milestones, and assigned tasks.
• Ensure assigned security activities and project deliverables are completed within agreed timelines.
• Support security awareness initiatives and training programmes.
• Promote adherence to information security policies, standards, and security best practices.
• Collaborate with technology, infrastructure, application, and cybersecurity teams on security initiatives.

Requirements

• Preferably 3+ years of relevant cybersecurity, information security, or security engineering experience.
• Hands-on experience managing or supporting enterprise security solutions.
• Experience with security technologies such as Email Security, IDPS, Attack Surface Monitoring, Anti-Malware, WAF, and Certificate Management Systems.
• Strong understanding of cybersecurity principles, security controls, practices, and technologies.
• Experience configuring, troubleshooting, and maintaining security infrastructure and tools.
• Ability to analyse complex security environments and identify vulnerabilities and appropriate technical solutions.
• Knowledge of security monitoring, threat detection, and preventive security controls.
• Knowledge or exposure to AI/ML security concepts and associated cybersecurity risks is advantageous.
• Knowledge or exposure to cryptography, PKI, certificate management, or Post-Quantum Cryptography is advantageous.
• Programming and scripting knowledge for security automation and technical troubleshooting.
• Strong analytical and problem-solving capabilities.
• Good communication and stakeholder management skills.
• Ability to work effectively with technical and non-technical stakeholders.

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline is preferred.
• CISSP or relevant cybersecurity/vendor certifications are preferred.