Security Engineer
Skills
Cloud SecurityContinuous ImprovementInformation SecurityInformation Security AnalysisPresentationsProgrammesQuantitative Analytics
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Solid demonstrable Information Security experience ideally in a regulated environment
- Strong knowledge of IT infrastructure and networking concepts
- Hands on experience building and maintaining systems and integrations for security controls
- Experience with cloud platforms such as Microsoft Azure and AWS
- Exposure to recognised control frameworks such as CIS Critical Security Controls NIST SP 800-53 or NCSC Cyber Assessment Framework
- Ability to identify effective implementation and test plans
- Excellent communication skills with business and technical stakeholders
- Ability to articulate security risk in practical terms
- Ownership attention to detail and follow through to conclusion
- Ability to prioritise remain agile and work independently on technical delivery
Nice to have
- methodical
- pragmatic
- constructive
- evidence-led
- flexible
- service obsessed
Day to day
- Translate security requirements into practical controls for technology and business change
- Review technical designs and implement security controls using industry best practice and Nucleus standards
- Validate controls through technical assessment and gather evidence that they work as intended
- Work closely with internal teams and outsource partners to deliver remediation and manage security risk
- Support audit due diligence and continuous improvement across security operations and analysis