M05 - IT Security Engineer

Role Overview

We are seeking an experienced IT Security Officer to support day-to-day cybersecurity operations, vulnerability management, incident response, security service management, and compliance monitoring across on-premises and cloud environments.

The role involves working closely with infrastructure, application, and security teams, as well as external vendors, to identify security risks, coordinate remediation activities, and ensure compliance with established cybersecurity policies and government security requirements.

Key Responsibilities

Vulnerability Management

• Coordinate vulnerability assessments and remediation activities across servers, endpoints, applications, infrastructure, and Azure cloud environments.
• Utilise vulnerability management tools such as TenableOne, Cloudscape, and equivalent solutions to identify and monitor security vulnerabilities.
• Review vulnerability assessment results, patch compliance reports, and remediation progress.
• Track outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
• Escalate high-risk vulnerabilities and overdue remediation activities to relevant stakeholders.
• Ensure vulnerability management activities comply with IM8 requirements and internal security policies.

Security Incident Management

• Support cybersecurity incident investigations, response coordination, containment, recovery, and resolution.
• Collaborate with internal teams, the CISO, and external security service providers during security incidents.
• Maintain incident records, investigation findings, and remediation documentation.
• Track post-incident corrective actions and support continuous improvement initiatives.
• Monitor incident trends and recommend improvements to security operations.

DDoS and Web Application Firewall (WAF) Operations

• Support the administration and monitoring of DDoS protection and WAF services.
• Review security alerts, attack reports, and service performance metrics.
• Coordinate WAF policy updates, security rule changes, and service improvements.
• Support investigations involving suspicious web traffic, application attacks, and DDoS incidents.
• Liaise with security vendors to resolve operational issues and maintain service effectiveness.

Security Operations and Stakeholder Coordination

• Coordinate cybersecurity activities across infrastructure, application, facilities management, and external security teams.
• Maintain security risk registers, remediation trackers, and compliance documentation.
• Follow up on action items arising from security assessments, incidents, audits, and service reviews.
• Escalate operational issues and security risks to relevant stakeholders.
• Support continuous improvement of cybersecurity and infrastructure operational processes.

Reporting and Compliance

• Prepare cybersecurity reports, dashboards, and management updates.
• Monitor vulnerability remediation, patch compliance, incident trends, and security service performance.
• Support security audits, compliance assessments, and evidence collection.
• Ensure adherence to IM8, internal security policies, and applicable cybersecurity standards.
• Provide regular updates on security risks, outstanding issues, and remediation progress.

Requirements

• Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline.
• 2–5 years of experience in IT security operations, cybersecurity operations, vulnerability management, or related functions.
• Hands-on experience with vulnerability management tools such as Tenable or equivalent solutions.
• Good understanding of vulnerability assessment, patch management, security monitoring, and incident response processes.
• Familiarity with Microsoft Azure security and cloud environments.
• Basic knowledge of network, server, application, and infrastructure security.
• Understanding of cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, or CIS Controls.
• Exposure to DDoS protection and Web Application Firewall (WAF) technologies is advantageous.
• Experience supporting security governance, audits, and compliance activities, preferably within enterprise or public-sector environments.
• Proficiency in Microsoft Excel and PowerPoint for reporting and analysis.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Ability to manage multiple priorities and work independently or collaboratively.

Preferred Certifications

• Microsoft Azure or Microsoft Security Certifications
• CompTIA Security+
• Certified Ethical Hacker (CEH)
• ISC2 Certified in Cybersecurity (CC)
• CISSP or CISM (advantageous but not mandatory)