At a Glance
- Tasks: Protect IT systems and data by managing security controls and responding to incidents.
- Company: Join a forward-thinking organisation dedicated to cybersecurity excellence.
- Benefits: Enjoy 25 days holiday, career development, and free onsite perks like croissants!
- Other info: Inclusive workplace with a commitment to equal opportunities and support for all applicants.
- Why this job: Make a real difference in safeguarding digital assets while growing your skills.
- Qualifications: Strong knowledge of security tools and experience in penetration testing required.
The predicted salary is between 40000 - 50000 £ per year.
The purpose of this role is to protect the organisation's IT systems and data through implementing, managing and monitoring security controls, responding to security incidents, and ensuring compliance with security accreditations.
The purpose of this role is to protect the organisation's IT systems and data through implementing, managing and monitoring security controls, responding to security incidents, and ensuring compliance with security accreditations.
Responsibilities
- Security Operations & Incident Management
- Managing ticket workload within the Security team.
- Gathering, analysing and acting upon threat intelligence.
- Responding to on-going security incidents.
- Responding to active alerts from security systems.
- Writing change management requests for security-related changes.
- Vulnerability & Endpoint Management
- Conducting penetration testing and tracking corrective actions.
- Resolving vulnerabilities in the infrastructure and EUC estate.
- Defining and managing the configuration of endpoint protection policies.
- Managing the configuration of Identity and Access Management services.
- Accreditation & Compliance
- Writing and ratifying policies and ensuring compliance with the Information Security Management System (ISO27001).
- Ensuring compliance with Cyber Essentials and Cyber Essentials+ requirements and carrying out audits.
- Ensuring compliance with accreditation policies through auditing with external 3rd party auditors.
Skills Required
- Strong technical knowledge of security tools, frameworks and best practices.
- Experience with penetration testing and vulnerability management processes.
- Understanding of endpoint protection technologies and policies.
- Knowledge of identity and access management principles.
- Familiarity with security accreditations such as ISO27001, Cyber Essentials and Cyber Essentials+.
- Excellent incident response and threat intelligence skills.
- Strong communication skills to convey security matters to technical and non-technical audiences.
Benefits
- 25 Days Holiday
- Birthday Day Off
- Buy Holiday Scheme
- Career Development and Progression Opportunities
- Employee Assistance Programme
- Enhanced Company Sick Pay
- Discounted Retail Vouchers
- Reduced Gym Membership
- SCG Mobile Benefit
- Employee Referral Bonus
- Annual Salary Reviews
- Pension Scheme
- Onsite Canteen (offering free croissants and free freshly made soup daily)
- Free On-Site Parking
- Charity Events
SCG is proud to be an equal opportunities employer.
We welcome applications from all parts of the community and are committed to upholding the principles of the Equality Act 2010.
We are committed to supporting applicants with disabilities. We will endeavour to make necessary adjustments to ensure a fair and accessible recruitment process.
#J-18808-Ljbffr
Security Engineer employer: SCG Midlands
At SCG, we pride ourselves on being an exceptional employer, offering a dynamic work culture in Dummer, Basingstoke that fosters professional growth and development. With competitive salaries, generous benefits including 25 days of holiday, career progression opportunities, and a supportive environment that values diversity and inclusion, we ensure our employees feel valued and empowered to make a meaningful impact in the field of cybersecurity.
