Cloud Security Engineer, AVP

Join us as a Security Consultant

• You’ll be responsible for our security architecture and design review as well as assessing security risks, vulnerabilities and threats associated with new or operational critical application and infrastructure IT platforms
• Working with the domain lead, you’ll define the product backlog and analyse a broad range of security information before providing advice and guidance on the best course of action required to manage any identified security risks
• You’ll enjoy considerable collaboration and visibility as you’ll report security risks to the business service and assist the wider organisation with the rapid delivery of their desired outcomes, ensuring organisational system health and security are maintained and improved where possible
• This role is available at associate vice president level

What you’ll do

Utilising your broad knowledge of security together with an understanding of our strategies and objectives, you’ll ensure a robust security environment across Centres of Excellence and domains by developing and executing appropriate security strategies. As such, you’ll build an understanding of the needs and demands of the customer and the business to ensure that they align with deliverables.

You’ll contribute to a culture of continuous improvement, promoting the benefits of security and working closely with teams to reinforce the robustness of the domain with a focus on automation, virtualisation, and scalability by incorporating security as early as possible. You’ll also analyses business requirements, technical solutions, or processes to identify security related risks and provide guidance on how they can be managed effectively through either technical or non-technical solutions.

In addition to this, you’ll:

• Provide effective security consulting and ensure decisions made are based on robust data, return on investment, and value measures that demonstrate thoughtful and intelligent cost management
• Encourage the identification of ideas and drive the delivery of initiatives that will reduce cost and simplify processes
• Build and leverage relationships with stakeholders to ensure that decisions made are commercially focussed and create long term value for the organisation
• Take ownership for raising a baseline of security knowledge across the organisation on security issues and help to develop the knowledge and capabilities of less experienced colleagues
• Represent security in business led forums to achieve effective security governance across Centres of Excellence, domains, and platforms

The skills you’ll need

We’re looking for someone educated to degree level with sound security concepts and domain knowledge and an understanding of change management processes and agile methodologies.

We’re also looking for:

• A subject matter expert in public cloud security Concepts such as AWS, GCP or Azure, with hands on experience of technologies such as Cloudtrail
• Hands on experience of implementing SIEM data ingestion and security use case development for Splunk
• Ideally, you will also have hands on experience with Terraform, Python development and AWS Security Lake an advantage
• Exposure with security monitoring tools such as Azure Defender, Google SSC, AWS Security Hub, Inspector and Guardduty or equivilent capability
• Strong written and verbal communication skills