Overview
Base pay range. A great opportunity for a Security Engineer to join a growing Financial Services Firm in London in a Hybrid working role. We are a Commodities focused Financial Services Firm based in London with offices in the US and Asia. We are seeking a Senior Security Engineer to join our London team.
Reporting to the IT Security Officer, you will work alongside the IT Security Engineer as part of a small IT Security team. As the Senior Security Engineer, you will implement and maintain robust security systems and protocols across the IT infrastructure. You will conduct risk assessments and vulnerability scans, mitigate vulnerabilities identified in penetration testing, and implement preventative measures to protect against cyber threats. You will monitor the security infrastructure and detect and respond to potential threats. You will help mentor and develop the IT security engineer and collaborate with the IT team to ensure compliance with security standards and best practices; you will essentially be a key technical leader in safeguarding sensitive data and systems.
Key responsibilities
- Manage WAF and DDoS systems
- Manage the Web Security Gateway
- Manage the Email Security Gateway
- Manage the SIEM, SOAR, Identity Protection and EDR, and respond to alerts and threats
- Carry out vulnerability scans, identify risks, and remediation
- Manage the perimeter and VPN firewalls
- Manage MFA and SSO
- Manage MDM/MAM and Conditional Access
- Manage security certificates and keys
- Manage IDS and IPS
- Manage PAM systems
- Deliver Cyber Security Awareness Training
- Remediate vulnerabilities and weaknesses identified during penetration testing
- Ad-hoc IT security projects
The successful candidate will have working knowledge and experience in managing the following technology stack:
- CrowdStrike EDR
- Mimecast Mail Security Gateway
- Duo
- Okta
- Rapid7 IVM, Tenable IO or Nessus
- Rapid7 IDR or CrowdStrike Next Gen SIEM
- Palo Alto Firewalls and Panorama
- InTune and Conditional Access
Experience using the following technology stack would be advantageous; understanding the principles is required.
- Imperva WAF and DDoS
- Menlo Web Security Gateway
- KnowBe4
- Digicert Certificates and Microsoft Certificate Services
- Ivanti or Automox patching
- AppCheck or Tenable WAS
- Desired Education: CISM, MS SC100, 200 and 900, OSCP or other penetration testing qualifications
- Industry: Financial services, SOC, Pentesting is desirable
- Personal Skills: Excellent inter-personal, written and verbal communication skills
- The ability to handle multiple priorities, tasks and projects simultaneously
- Clear and precise verbal and written communication
- Ability to deliver presentations to staff
- Cross functional influence, engagement and collaboration skills
Location and hours
- The position is usually based in our London Head Office
- Hours: 0730 – 1730 shift pattern with occasional home/office rotation (0730-1630 two days from home, 0830-1730 three days in the office)
- There will be periods of weekend and out-of-hours work
Job details
- Seniority level: Mid-Senior level
- Employment type: Full-time
- Job function: Information Technology
- Industries: Financial Services and Technology, Information and Media
Referrals increase your chances of interviewing at Marlin Selection Recruitment by 2x.
Get notified about new Security Engineer jobs in London Area, United Kingdom.
#J-18808-Ljbffr