Security Systems Engineer

We are seeking an experienced Senior Security Systems Engineer who combines strategic oversight with strong hands-on capabilities. This role is pivotal in shaping the overarching technical security posture of our organisation while actively integrating security into our development and operational workflows.

The ideal candidate will bridge the gap between high-level security strategy and practical implementation, ensuring that our systems are secure by design and that security is embedded throughout the software development lifecycle. This individual will ensure that both our strategic security objectives and operational practices align with compliance requirements and industry best standards.

• Strategic Security Architecture: Define security requirements and baseline standards for systems and applications. Evaluate and recommend security technologies, tools, and solutions to enhance our security posture. Ensure alignment of security strategies with business objectives and compliance mandates.
• Hands-on DevSecOps Implementation: Integrate security practices into CI/CD pipelines, automating security testing and compliance checks. Collaborate with development and operations teams to ensure secure coding practices and configurations. Implement and manage security tools within the DevOps toolchain (e.g., SAST, DAST, SCA tools).
• Infrastructure Security Oversight: Design and oversee the implementation of secure infrastructure solutions, both on-premises and in the cloud. Ensure that network architectures are secure, scalable, and resilient.
• Policy Development and Compliance: Develop and enforce security policies, standards, and guidelines. Collaborate with the Compliance Manager/CISO to ensure adherence to regulatory requirements (e.g., GDPR, ISO 27001).
• Incident Response and Management: Establish and maintain incident response plans and procedures. Lead technical response efforts during security incidents or breaches. Conduct post-incident analyses to prevent future occurrences.
• Leadership and Collaboration: Provide technical leadership and mentorship to security and DevOps teams. Promote a security-aware culture across the organization. Engage with stakeholders to communicate security strategies and risks effectively.
• Continuous Improvement: Stay abreast of emerging security threats, trends, and technologies. Proactively identify opportunities to enhance security architecture and processes. Lead initiatives to improve security monitoring, detection, and response capabilities.

• Professional Experience: Minimum of 5 -10 years of experience in information security. Proven hands-on experience with DevSecOps practices and tools. Extensive experience in designing and securing complex IT infrastructures. Familiarity with cloud security architectures (AWS).
• Technical Skills: Deep understanding of security principles, protocols, and standards. Proficiency with DevOps and DevSecOps tools (e.g. GitLab CI/CD, Ansible, Terraform). Experience with security tools like SIEM/SOAR (preferably Rapid7), IDS/IPS, vulnerability scanners, and code analysis tools (SonarCloud, Snyk, Chekov). Strong knowledge of network security, encryption, identity and access management, and application security.
• Certifications (Preferred): CISSP, CISM, or equivalent for security architecture expertise. Certifications in cloud security (e.g., CCSP) or DevSecOps methodologies.