Full job descriptionThe Senior IT Security Engineer will work alongside colleagues as part of a 3-person IT Security team. You will implement and maintain robust security systems and protocols across the organisation IT infrastructure. You will conduct risk assessments and vulnerability scans, mitigate vulnerabilities identified in penetration testing, and implement preventative measures to protect against cyber threats. You will monitor the security infrastructure and detect and respond to potential threats. You will collaborate with the IT team to ensure compliance with security standards and best practices; you will essentially be a key technical leader in safeguarding sensitive data and systems.
Key Responsibilities/Duties:
*Manage the Secure Web Gateway
*Manage the Email Security Gateway
*Carry out vulnerability scans, identify risks, and remediation
*Manage the perimeter and VPN firewalls
*Manage MFA and SSO
*Manage MDM\MAM and Conditional Access
*Manage security certificates and keys
*Deliver Cyber Security Awareness Training
*Remediate vulnerabilities and weaknesses identified during penetration testing
Experience – Essential:
The successful candidate will have a good working knowledge and experience in managing the majority of the following technology stack
*CrowdStrike EDR
*Mimecast Mail Security Gateway
*Duo
*Okta
*Rapid7 IVM, Tenable IO or Nessus
*Palo Alto Firewalls and Panorama
*InTune and Conditional Access
*Entra ID, Purview, Defender, Active Directory, DNS, GPO
Experience – Desirable:
*Cisco Secure Access
*Cisco Umbrella
*Cisco ASA
*Digicert Certificates and Microsoft Certificate Services
*Ivanti patching
*Kali Linux (NMAP, Metasploit, BurpSuite, John etc)
*Microsoft Purview
This is a hybrid role working 3 days a week in the London office and 2 days remotely.