Security Engineer – Redhill, Surrey

Developing the information security plans and policies for NSSLGlobal and Customers working with Security Management and Compliance functions to embed security management plans into operational practice.

Implementing protections and solutions to ensure and enforce the information security plans and policies.

Monitoring and collating information from monitoring tools as well as third parties to provide an accurate view of the current security position of the organisation and customers including security events, ongoing risks and treatment plan.

Investigation and resolution of security incidents events logged by staff members, monitoring tools and security partners.

Educating and advising team members on the handling security threats e.g. suspicious emails, security alerts, CVE, etc.

To have responsibility for the through life security of both internal and customer networks/systems as required by the company testing for vulnerabilities and recommending improvements.

To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective.

Creating documentation around policies, procedures and events.

Key Tasks

• Be the centre of excellence for network and device security.
• Lead by example and develop and maintain personal and group technical expertise in company bespoke products and security ensuring integrity and security of networks.
• Good working knowledge & experience of Cisco Firewalls, Routers & Switches.
• Compliance standards (ISO27001 and ITIL).
• Security tools sets (SIEM, IDS/IPS).
• Pen Testing tools.
• Vulnerability Management.
• Design, build, test, commission and troubleshoot security solutions (IDS/IPS, SIEM) on internal and customer networks.
• Experience developing and maintaining policies, procedures, standards and guidelines.
• Write and maintain configuration/reconfiguration documentation, schematics, support guides and other documentation as required.
• Share knowledge, train, support and develop individuals internally on security management.

Point of contact:

To be the key expert in CyberSecurity Design/Management for the company and customers as required. Final point of contact for security issues including trouble shooting and resolving to sometimes tight timescales. Be involved within the company Incident Management scheme. To liaise with other departments as required to ensure full support of networks and knowledge.

Decision Making & Judgement

The job holder will make informed decisions: Taking ownership of issues relating to cybersecurity, their integrity and managing and completing tasks. Third line support of all network security issues.

Experience/Skills/Qualifications

• A minimum of 5 years multi network exposure including hands on experience of designing and managing secure networks including the following systems: Cisco Firewalls, Routers, Switches, Juniper platforms, SIEM tools, IDS/IPS, Penetration testing (PEN Testing), Computer Forensic tools, ISO27001 & GDPR knowledge.
• Ability to communicate network security issues to peers and management.
• Ability to absorb and quickly gain and retain knowledge of NSSLGlobal bespoke products & satellite services.
• Must be able to demonstrate technical competency in all they do with a right first time, every time attitude.
• Excellent customer support skills and ability to interact with customers both on the phone and in meetings.
• Must hold, or have the ability to easily achieve SC Security Clearance.
• A well organized, pro-active and can-do attitude.
• Effective communicator with an eye for detail and accurate planning skills.
• Telecommunications background ideally with knowledge of satcom and/or maritime communications background.

Most Difficult Part of Job

Providing customer satisfaction at all times often to tight timescales and changing priorities. Maintaining effectiveness, integrity and security of all company and customer networks. Training others for risk and cybersecurity competencies. Constantly improving standards of cybersecurity and compliance.

Main Purpose of Job

The Enterprise Engineering team are responsible for a variety of services offered to our customers. These include: Bespoke hardware/software developments to provide customers with the ability…