Information Technology Security Engineer

Responsibilities:Own and continuously strengthen security controls across in-house IT operations and outsourced services, in line with company policies and industry standardsChampion secure SDLC and secure coding practices for in-house developed applicationsLead regular vulnerability assessments and penetration tests across IT systems and network infrastructure, and drive timely patching of critical vulnerabilitiesDefine and own the Computer Security Incident Response process — including escalation channels, diagnosis, and coordinating remediation with internal and external stakeholdersBuild and maintain dashboards and metrics on cyber threats and vulnerabilities for management reportingGovern the secure adoption of AI across the organisation, including LLMs and AI agentsAct as the go-to security advisor for teams across the businessStay ahead of emerging cyber-attack threats and evolving mitigation techniquesRequirements:Degree in Information Security, Computer Science, IT, or a related field3–5 years' hands-on experience in information security — incident response, security operations, or computer forensicsSolid knowledge of TCP/IP networking and security products (firewalls, IDPS, web proxies)Proficiency with Windows and Linux/UNIX environmentsWorking knowledge of core security technologies: AAA, email/web security, PKI, encryption, endpoint protectionStrong understanding of attack techniques (APT, DDoS, malware, phishing) and corresponding investigation and response methodologiesNice to Have:Security certifications such as CISSP, OSCP, GIAC, CEH, CISM, or CISAExperience with security frameworks and standards: ISO 27001, C-RAF, COBIT, CIS Critical ControlsBackground in security vendors or law enforcementExposure to AI security governance — e.g. OWASP Top 10 for LLMs, Agent 365, Power Platform, or similar AI risk frameworksExperience in IT/security project management, product evaluation, and vendor management