Security Engineer

PURPOSE:Vulnerability Management and Infrastructure Security (VMIS) is a critical function within Standard Chartered Bank operating under the overall purview of COO Organisation.

The VMIS Program team is made up of Product Owners, Delivery Leads, Scrum Masters, QPR/MPR Coordinators and PMO, who are accountable for the governance and execution of all projects within CSS VMIS Portfolio with adherence to Enterprise Change Management (ECM) Project) and Delivery New Ways of Working Standards (DWOWs).

As part of the Transformation activities within SCB, new security tooling and controls are being implemented to manage vulnerability management and remediation and reduce the security risk exposure to the bank.

An experienced IT Security engineer is needed to implement the configuration and system hardening, security patch assurance tooling and remediation orchestration tooling capabilities, that will improve the banks ability to provide the current risk exposure, detect and remediate vulnerabilities and therefore reduce the overall risk exposure.

RESPONSIBILITIES:

Understand Application Security service and tooling needs and gather technical requirements

Manage the implementation and configuration of patch assurance tooling.

Manage the implementation and configuration of an end-to-end vulnerability lifecycle mgt tool

Lead end-to-end integration of security software tools, including definition of integration design, configuration and testing.

Provides authoritative advice and guidance on any aspect of test planning and execution.

Engage closely with the platform engineering teams to help determine technical controls for obsolete windows 2003 Server and Windows XP platforms and determine a prioritized implementation schedule.

Document mitigating controls for obsolete windows 2003 Server and Windows XP platforms and facilitate training and capability handover to BAU teams.

KEY STAKEHOLDERS:

Security Technology Service domain heads

Application Security Scanning & Remediation Teams

Technology Services Infrastructure Engineering and Operations

Development team leads for various CIO streams