Security Engineer II

Purpose of the Job:

The purpose of the Senior Security Engineer is to secure the organisation's computer systems, networks and ensure that all platforms are protected. This role involves analysing existing security measures/controls and creating new and enhanced security measures. This role will also implement security measures that effectively safeguard sensitive data in the event of a cyber-attack. This is a highly collaborative role that is part of a larger team dedicated to cybersecurity and involves frequent interaction with various members of the IT team. In addition, this role will be responsible for collecting threat intelligence and automating systems to consume threat feeds and track adversaries. The Senior Security Engineer is also responsible for the development and execution of large-scale cyber security initiatives and requires a professional with problem-solving abilities who can work in a fast-paced environment and has a clear passion for cybersecurity and related technologies.

Job Objectives:

Security Engineering & Control Implementation

• Implement and enhance security controls to protect systems, networks, applications, and data.
• Automate security controls, security processes, and operational activities to improve efficiency and effectiveness.
• Assist with the implementation, configuration, and maintenance of security technologies and solutions.
• Identify and implement new security technologies and best practices to strengthen the security environment.
• Work with technical teams to integrate security requirements into technology solutions and operational processes.

Security Governance, Standards & Compliance

• Provide assurance through collaboration with stakeholders that technology platforms meet security requirements and standards.
• Develop, maintain, and improve security standards, policies, procedures, and best practice documentation.
• Translate technical security requirements into business requirements and communicate security risks to a variety of stakeholders.
• Provide security recommendations to support secure decision-making across the organisation.
• Influence cross-functional teams in the implementation and operation of cybersecurity controls.

Threat Management & Vulnerability Assessment

• Monitor emerging cyber threats, vulnerabilities, and industry security trends to proactively address potential risks.
• Conduct continual monitoring, vulnerability assessments, and log analysis to identify security weaknesses and threats.
• Collect, analyse, and operationalise threat intelligence to improve threat detection and response capabilities.
• Automate systems and processes used to consume threat feeds and track threat actors.
• Conduct proactive research to identify security risks and recommend appropriate remediation measures.

Security Monitoring & Incident Response

• Monitor networks, systems, and security tools for suspicious activity and security incidents.
• Identify, investigate, and respond to information security events in collaboration with Digital Forensics and Incident Response teams.
• Support the containment, remediation, and recovery of cybersecurity incidents.
• Analyse security events and incidents to identify root causes and recommend improvements to security controls.

Stakeholder Collaboration & Security Advisory

• Partner with application development and engineering teams to deliver secure technology solutions.
• Collaborate with business and technical stakeholders to address complex security challenges and requirements.
• Provide specialist security guidance and recommendations to support project delivery and operational activities.
• Communicate security risks, priorities, and mitigation strategies to technical and non-technical audiences.

Continuous Improvement & Security Innovation

• Recommend innovative technologies, methodologies, and approaches to enhance cybersecurity capabilities.
• Drive large-scale cybersecurity initiatives aimed at improving the organisation's security posture.
• Evaluate and improve existing security measures to address evolving business and threat landscapes.
• Continuously assess and optimise security processes, controls, and technologies to improve resilience and operational effectiveness.

Qualifications:

• An IT related qualification in computer science, cybersecurity, or any related field - (desired)

• Recognised industry certifications in cybersecurity such as CISSP - (essential).

Experience:

• 5 years of experience in cybersecurity, with solid experience across a variety of security products including firewalls, EDR, SIEM, WAF, IAM, PAM, DLP and encryption solutions - (essential).

Banking sector experience and/or exposure (preferred).

Experience with AI (generative and agentic), workflow automation, and orchestration technologies to drive automation, improve operational efficiency, and enhance incident response within a Security Operations Centre (SOC). (preferred)

Experience in creating new ways to solve existing production security issues and recommending security enhancements - (desired)

Experience in Incident Response including the ability to document, any security threats, resolve technical faults and allocate resources to deliver real solutions in a cost-effective way - (desired)

Knowledge and Skills:

• Knowledge of services related to cloud compute, network, storage, content delivery, administration and security - (essential)

• Good understanding and exposure to Information Security standards, architecture, and models - (essential)

• Hands on knowledge of automation and DevSecOps skills - (essential).

• Good understanding of software development principles, including design patterns, code structure, programming languages, continuous integration, continuous deployment, and deployment orchestration - (preferred)