Application Security Engineer

Responsibilities

Managing the day to day Operational Security (OpSec) aspects of the IT Security Chapter in operating the Information Security controls and managing user enquiries
Supporting incident investigations, including forensics and responses
Supporting and participating in red teaming, penetration testing and social engineering
Analysing and advising on new security technologies and program conformance
Recommending modifications in legal, technical and regulatory areas that affect IT security
Assisting the IT Security Chapter Lead with managing services, suppliers, partners and stakeholders
Supporting stakeholders with InfoSec guidance, assessing information security risks within their business areas and providing security consultancy and support to technical teams
Creating new ways to solve existing production security issues
Ensuring that Information Security and Cyber risk is identified and successfully managed in everything that the organisation does
Performing third-party risk analysis and security assessments

Experience as a hands-on technical security engineer
Experience working with SOCs, both on-site and off-site, and third parties
Experience securing on-premise and off-premise infrastructure deployments
Knowledge of key Azure and server security services
Ability to demonstrably link security solutions to business goals and objectives