Senior Information Security Engineer

Selby Jennings

Greater London, UK

11 days ago

Apply on www.collegerecruiter.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

10 years minimum

Working hours

Regular working hours

Job source

www.collegerecruiter.com

Tech stack

Amazon Web Services Software System Penetration Testing Microsoft Azure Cloud Computing Code Review Cyber Security Data Security Python (Programming Language) Windows PowerShell Security Software Software Engineering Scripting

+7 more

Google Cloud Software Security Firewalls (Computer Science) Information Technology Static Application Security Testing Vulnerability Analysis Dynamic Application Security Testing

Job description

Enhance security across core domains including network, system, email, cloud, and data security.
Act as a security advisor for major IT projects, ensuring risks are identified, managed, and mitigated.
Manage and optimise a broad suite of security tools to ensure effective deployment and ongoing operation.
Lead the design and implementation of security solutions and architectures protecting critical assets.
Provide second-line support for Security Operations, acting as an escalation point for complex issues.
Conduct threat modelling and risk assessments to identify vulnerabilities and define mitigation strategies.
Oversee the relationship with the Managed Detection & Response (MDR) provider to ensure continuous improvement.
Deliver key initiatives on the security roadmap, aligned to business objectives and evolving threats.
Collaborate with cross-functional teams to promote security awareness and integrate best practices across the business.

Requirements

10 years’ experience in information security roles such as security engineering, architecture, operations, or application security.
Hands-on experience with threat modelling, penetration testing, and automated security validation.
Strong understanding of cloud, network, and systems security principles.
Scripting experience in at least one language; Python or PowerShell preferred.
Familiarity with security technologies including EDR, DLP, vulnerability scanners, firewalls, and email gateways.
Strong analytical and problem-solving skills, capable of addressing complex issues and designing practical solutions.
Excellent communication skills with the ability to partner effectively with both technical and non-technical teams.
Degree in Computer Science, Engineering, or a related STEM discipline., * Deep knowledge of risk assessment methodologies.
Exposure to security best practices across Azure, AWS, and GCP.
Ability to analyse software for security risks, including code review, SAST/DAST, and identifying vulnerabilities in application design.
Familiarity with regulatory frameworks (e.g., SEC Cybersecurity rules, MAS TRM Guidelines, NFA Cybersecurity Guidance, GDPR).
Relevant security certifications.