Information Security Engineer in Dorchester

To be an Infrastructure Technician within the Support & Infrastructure Team responsible for deployment, monitoring and maintaining an extensive cloud hosted RDS application suite for the insurance industry; as well as our internally used cloud applications and on-prem equipment. Also acting as the liaison with the larger Verisk group for security as well as infrastructure issues. To contribute to the strategy of the team, meet the Company's goals and objectives, and improve the quality of the service it delivers both internally and externally. Be a part of the professional culture within the team where ownership and quality are key values.

Responsibilities

• Monitor and resolve issues affecting the delivery of services to our clients;
• Manage application licensing;
• Keep up to date with the latest infrastructure and SysOps technologies and methodologies;
• Gain clear understanding and knowledge of Morning Data software products, infrastructure, and the insurance industry;
• Help prompt the use of automated software deployment and monitoring at every opportunity;
• Provide sensible estimates for work items and consistently deliver against them;
• Support the ongoing modernisation process.

Security

• Maintain an understanding of the regulatory and compliance issues driving Sequel's ISMS;
• With leaders across the business, assist with the maintenance and management of Sequel's Risk Registers;
• Gain an understanding of the key information risks to the business (systems, networks, data, human error, cyber‑attacks);
• Engage in information security audits, in support of the ongoing measurement of risks and the reduction thereof;
• Report (qualitatively and quantitatively);
• Manage Security events and incidents as they occur.

Team contribution

• Help facilitate the smooth delivery of all projects, enhancements and support delivered by the team;
• Contribute to technology selection and methodology decisions, including standardisation of system architecture, use of automation where appropriate and best practice for the deployment processes;
• Engage with and strive to enhance team procedures and processes;
• Help & support Software Development teams to produce secure applications;
• Develop strong working relationships with other departments & Business Units;
• Be available 'out of hours' if required to complete specific tasks and support customers (neither a usual or regular occurrence);
• Commit to a culture that promotes new and innovative thinking; creating opportunities and efficiency savings where possible throughout the organisation;
• Actively mentor team members on a one‑to‑one basis and promote knowledge transfer within the team via 'show and tell' sessions;
• Assist with critical support issues, using your knowledge and experience to help identify and remediate these, in accordance with best practice;
• Produce well written documentation and assist with customers' RFIs and RFPs;
• Obtain at least CII certification to appreciate how the insurance industry works.

Qualifications

Essential

• A minimum of 2 years in an infrastructure, SysOps or Security role;
• Active Directory management;
• AWS ecosystem, especially AppStream 2.0;
• NTFS permission & Group Policy configuration & management;
• Microsoft RDS Architecture (RemoteApp/RDWeb Gateway/RDS Broker);
• Virtual Windows 2016 DC Servers / File Server with SMB file shares;
• Site-to-Site VPN configuration & maintenance;
• PowerShell;
• Windows IIS security & management;
• Event Log analysis and troubleshooting;
• Working with external cloud and security providers;
• Cyber Security experience inc. resolving issues raised from external PEN testing;
• Analytical skills in monitoring, evaluating and reporting on risk scenarios;
• Strong report‑writing skills both for policy management and for Team/Board reporting purposes;
• Communication skills: confidence and clarity in giving direction on information risk issues; ability to engage across all levels of the business;
• Strong starter/finisher, able to work independently whilst taking direction from key management;
• Related experience, or keen interest in pursuing an Information Security specialism.

Desirable

• IaaS and PaaS environments;
• SQL;
• VMWare Cloud Director;
• SharePoint Windows IIS security & management;
• Security & GDPR compliance (ISO27001/ISO27032/SOC 2);