Security Engineer in Cardiff

The Atradius Group provides trade credit insurance, surety and collections services worldwide, and has a presence through 160 offices in 52 countries. The products offered by Atradius protect companies around the world against the default risks associated with selling goods and services on credit. At Atradius, we believe in personal development and the Growth Mindset. Our culture is based on teamwork, reliable accountability, constantly improving and unrivalled service.

Department Description: The Security Management team is responsible for protecting Atradius, information and data from cyber threats. The Engineer will report to the Head of Security, who is responsible for defining the Information Security strategy, policies, standards, processes and procedures, monitoring compliance with security requirements and addressing any security issues.

Your key responsibilities will be:

• Maintenance and support of security measures for Atradius’ systems, ensuring that they meet not only the business needs but also legal, regulatory and compliance requirements and that these are suitably audited.
• Providing technical security support to projects and other requests from the business, to provide practical, realistic advice as to how to meet business needs while reducing the level of risk to the business and processes.
• Enhancing identity and access management, threat intelligence, security logging, monitoring and alerting through optimisation automation into Atradius security platforms to improve threat hunting, incident analysis and response capabilities.
• Automating, improving and adding contextualisation to Atradius vulnerability management tooling and processes.
• Ensuring correct secure configuration management on Atradius supporting platforms and cloud hosting services.
• Supporting Atradius Microsoft E5 investment and Microsoft Azure security.
• Supporting Network Security especially around network segmentation, certificate management and DNS security.

What qualifications should you have?

The ideal candidate will have a minimum of two years experience in a similar role and meet the following profile:

• Relevant Information Security and Information Technology knowledge. Applicants able to demonstrate this experience and knowledge, but lacking the relevant certifications will be considered (CIGE, CIST, CIAM, CIMP, CAMS, CAP, CISSP, etc.)
• Microsoft Certifications focused on security (e.g. Microsoft Certified: Security Operations Analyst Associate, Microsoft Certified: Identity and Access Administrator Associate).
• And/or Cisco Certifications (or similar) (e.g. CCNA, Cyber Ops or CCNP Security).
• Technical knowledge in one or more of the following – Unix, AIX, Linux, Windows, Oracle, F5, WAF Cisco, Palo Alto, Azure, AWS, Google.
• Experience of one or more in Defender, Nessus, ELK, Burp suite, Imperva, Zscaler or other security compliance tooling and their enterprise implementation highly desirable.
• Experience of supporting an Identity and Access Management suites and their enterprise implementation, including API security, RBAC, ABAC desirable.
• Some experience in secure coding/scripting, examples include (HTML, Bash, Python, Java, Ruby, Powershell, PHP) would assist.

• Experience with security standards (e.g. ISO27001/2, NIST, CIS), security best practices and major cyber security/privacy related regulations.
• Demonstrable experience of having worked within Information Security as an analyst or engineer is highly desirable.

What do we offer?

• A dynamic, international and challenging work environment.
• Training and support to reach your full potential including the opportunity for continuous professional development.
• Attractive terms and conditions, including competitive salary, pension package and a range of flexible benefits and rewards.
• Challenging tasks with individual development and training opportunities.
• Equal opportunities for all.

The success of our organisation stands with the quality of our people and the ideas they have. Insights and innovative solutions for our customers are the result of an interplay of cultures, knowledge and experience. That is why diversity is extremely important to Atradius. To ensure that all colleagues within Atradius can develop their qualities, we promote an inclusive culture in which everyone feels involved and valued. We encourage and welcome everyone to apply to our positions.

Do you have any questions about our offer? Morgan CURTIS, Human Resources, is available by e-mail at Morgan.CURTIS@atradius.com.

Atradius is a global provider of credit insurance, bond and surety, collections and information services, with a strategic presence in over 50 countries. The products offered by Atradius protect companies around the world against the default risks associated with selling goods and services on credit.