Cyber Security Engineer

Vallum Associates; Greater London; Presencial; GBP 60.000 - 90.000; Jornada completa

Descripción de la vacante

Vallum Associates in London is seeking a Cyber Security Engineer to serve as the local SME for IT and OT security, implementing central policies and controls locally, and supporting SOC/CERT collaboration.

You will work across infrastructure, cloud, networks and applications to harden systems, turn policy into controls, and contribute to risk, governance and assurance across environments.

Formación

• Hands-on cyber engineering in a medium or large organisation.
• Experience implementing enterprise security controls.
• Vulnerability management and remediation experience.
• Supporting incident investigation and remediation.

Responsabilidades

• Act as local SME for IT and OT security and implement security controls.
• Coordinate vulnerability management and remediation with asset owners.
• Support SOC/CERT investigations, containment and lessons learned.
• Ensure IT/OT segregation and secure remote access as needed.
• Translate policy requirements into technical controls and architecture.

Conocimientos

Cyber security engineering

Vulnerability management

Incident response

Security architecture

Risk governance

Herramientas

EDR

IAM

MFA

PAM

IEC 62443

Descripción del empleo

Title: Cyber Security Engineer

Location; London, Uk

Duration: 24 Months Fix term Contract

Provide hands-on technical cyber security expertise to protect the resilience and secure operation of UK's IT, OT, applications, infrastructure and digital services. The role is the local interface with central and Group Cyber Security (SOC, CERT, specialist teams), making sure central policies, standards and controls are implemented locally.

Experience

• Hands-on cyber engineering in a medium or large, technically complex organisation.
• Implementing enterprise security controls.
• Vulnerability management and remediation.
• Supporting incident investigation and remediation.
• Working with infrastructure, network, cloud, identity and application teams.
• Security review of technical solutions.
• Turning policy into technical controls.
• Working with centrally provided cyber services.

Key Accountabilities

• Engineering and operations: Act as local technical SME for IT and OT. Implement, operate and improve security controls across EDR, IAM, MFA, PAM, network segmentation, email, cloud, monitoring/logging, vulnerability management and device controls. Work with infrastructure, application, cloud and network teams to harden systems.
• Vulnerability management: Support the end-to-end process across IT and, where appropriate, OT. Review findings, coordinate risk-based remediation with asset owners, validate fixes, support patching and hardening, and manage security exceptions.
• Incident management: Be the local technical interface with SOC/CERT. Support investigation, containment, recovery and lessons learned, and take part in incident exercises and resilience testing.
• OT / ICs security: Work with plant and engineering teams on IT/OT segregation, secure remote access, legacy-system risk, asset visibility and monitoring, applying IEC 62443 and the NCSC CAF.
• Security architecture / cyber-by-design
• Risk, governance and assurance