Information Security Engineer

The Information Security Design and Engineering Team are responsible for the design, engineering, technical delivery, maintenance and improvements of the systems and applications for the Information Security Office. We are expected to add value by improving these tools through tuning, enhancements, and improved adoption. Working alongside the other areas of Technology and the Information Security Office, we ensure that solutions delivered meet industry best practice and compliance requirements.As an Information Security Engineer, you will be responsible for the development and updating of systems or products, in conformance with agreed security requirements and standards, throughout its lifecycle. You will document the technical designs, implementation and tuning of a combination of security controls to balance prevention, detection, response and useability. This could involve detailed technical design, coding, or hardware prototyping, debugging and documentation.Key Accountabilities:To proactively protect client in engineering secure solutions from inception to retirement, reducing the risk of a cyber event impacting customers, colleagues or reputation.Development of information security products using components, tools, techniques, and methodologies which minimize the chance of creating vulnerabilities in the productsIntegration of security products into more complex systems, including cloud-based systemsProduce documentation on the products and services to guide implementers, system operators and administrators and, sometimes, end usersReview and process incoming engineering requests from Cybersecurity stakeholders, as well as being part of the team in testing and implementing technology configuration changes and updates.Work with other areas of the information security team with subject matter experience, resolution of issues and transfer of knowledge through training, support materials and workshopsProvide technical guidance and leadership for at least one of the products within the cyber portfolio, really be the expert for a system we manageProvide out of hours support as part of a rota.Experience:In order to succeed in this role, it is expected that you will have experience in:Working within information security operations and engineering functionsDevelopment and documentation of detailed designsCyber security and data protection regulationsCloud development techniquesConfiguring and implementing software and hardware security components, including cryptographic solutionsSecure development standards, such as Security Development Lifecycle'Agile' techniques and methodologies, such as SCRUM, SAFe, continuous Development, Continuous Integration and Continuous TestingMentoring and people developmentKnowledge and experience in one or more of the following areas:Identify & Access ManagementEndpoint ProtectionNetwork SecurityOffice 365 & Email SecurityApplication SecurityCloud Platform SecurityOperational Technology Security