At a Glance
- Tasks: Manage security posture and protect applications from external threats.
- Company: Award-winning company known for its great culture and flexibility.
- Benefits: 3 weeks paid time off, health benefits, and a 401(k) with company match.
- Other info: Dynamic environment with opportunities for professional growth and development.
- Why this job: Join a team that values work-life balance and meaningful contributions.
- Qualifications: 3+ years in penetration testing and strong knowledge of security vulnerabilities.
The predicted salary is between 50000 - 60000 ÂŁ per year.
About Us
Our mission is simple: we want to set people free to do meaningful work. People love our software--and it turns out that people love working here too. We've been recognized as a "Best Company to Work For", and we're proud of our team for receiving awards for workplace effectiveness and flexibility.
What You'll Do
As our Security Engineer, you'll be responsible for managing our security posture as well as keeping our application safe from external threats. Our ideal Security Engineer will be able to manage ITârelated security issues, such as firewall management, HIDS/HIPS configuration, log monitoring, and audit compliance (SOC II). You will ensure that our software application is both manually and automatically pentested for security vulnerabilities (both Red Team and Blue Team exercises), and be a decision maker in all things security management - able to "pull the plug" on a feature, application, or other business function if it represents a significant risk to the company.
You will:
- Conduct penetration tests against web applications infrastructure
- Validate security on new hardware and software infrastructure
- Assist front-line company representatives with security questions
- Manage firewall rules and internal pentesting
- Manage SOC II controls and external pentesting
- Manage priorities through backlog management system (Jira)
Come to work, do great things, then go home!
What You Need to Get the Job Done
- 3+ years experience performing penetration testing (against web applications)
- Experience securing cloudâbased infrastructures and solutions
- Previous experience working on an information security team
- Advanced knowledge of common security vulnerabilities (OWASP) and best practices
- Familiarity with SOC II controls and how to review them
- Experience in other technical roles (SysAdmin, Helpdesk, etc.)
- Strong understanding of Linux server environments
- Experience with Kanban and Agile DevOps workflows
- A good attitude and willingness to learn - you'll be with great people.
What Will Make Us REALLY Love You
- You have a degree in CS, IT, or similar field
- CISSP, Security+, or other security related or linux or cloud related certifications
- Previous scripting experience (Python, Perl, Ruby, or PHP)
- You possess strong time prioritization skills
- You are proactive and look for ways to continuously increase efficiency
- We can see that you have a measured demeanor that assumes the best of people and respects coâworkers.
- Real world examples of demonstrated technical leadership
What You'll Love About Us
- Great Company Culture. Business Best Companies to Work For (2020 & 2021) and the Sloan Award for Business Excellence in Workplace Effectiveness and Flexibility (2020 & 2021)
- Work that Stays at Work. Genuine work/life balance served here!
- Rest and Relaxation. 3 weeks paid time off, 11 paid holidays, and we pay you to go on vacation (ask us about this!)
- Health Benefits. Medical with HSA and FSA options, dental, and vision
- Prepare for the Future. 401(k) with company match
- Financial Peace University. Take the class, get reimbursed, get a bonus
An Equal Opportunity Employer--M/F/D/V
Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.
IT Security Engineer in Westminster employer: Safaricom
Contact Detail:
Safaricom Recruiting Team
StudySmarter Expert Advice đ¤Ť
We think this is how you could land IT Security Engineer in Westminster
â¨Tip Number 1
Network like a pro! Reach out to current employees on LinkedIn or at industry events. A friendly chat can give you insider info and maybe even a referral!
â¨Tip Number 2
Show off your skills! If youâve got a portfolio of projects or GitHub repos, make sure to highlight them during interviews. Real-world examples speak volumes!
â¨Tip Number 3
Prepare for those tricky questions! Brush up on common security scenarios and be ready to discuss how youâd handle them. Confidence is key!
â¨Tip Number 4
Apply through our website! Itâs the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are keen to join us directly!
We think you need these skills to ace IT Security Engineer in Westminster
Some tips for your application đŤĄ
Tailor Your CV: Make sure your CV is tailored to the IT Security Engineer role. Highlight your experience with penetration testing, firewall management, and any relevant certifications. We want to see how your skills align with what weâre looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why youâre passionate about security and how you can contribute to our mission. Keep it concise but engaging â we love a good story!
Show Off Your Technical Skills: Donât hold back on showcasing your technical expertise! Mention specific tools and methodologies youâve used in previous roles, especially around SOC II controls and cloud security. Weâre keen to see your hands-on experience!
Apply Through Our Website: We encourage you to apply directly through our website. Itâs the best way for us to receive your application and ensures you donât miss out on any important updates. Plus, we love seeing applications come in through our own platform!
How to prepare for a job interview at Safaricom
â¨Know Your Stuff
Make sure you brush up on your knowledge of common security vulnerabilities, especially those listed in the OWASP Top Ten. Be ready to discuss how you've tackled these issues in past roles, as well as your experience with penetration testing and firewall management.
â¨Show Off Your Experience
Prepare to share specific examples from your previous roles that highlight your skills in managing IT security issues. Whether it's a successful pentest or a time you had to make a tough call on security, real-world examples will help you stand out.
â¨Get Familiar with SOC II
Since SOC II compliance is part of the role, make sure you understand its controls and how they apply to security management. Being able to discuss your experience with SOC II will show that you're not just familiar with the theory but have practical knowledge too.
â¨Demonstrate Your Team Spirit
This company values a good attitude and teamwork, so be prepared to talk about how you collaborate with others. Share instances where you've worked with cross-functional teams or helped colleagues with security questions, showcasing your willingness to support and learn from others.