IT Security Engineer

Reed Technology; Scotland; Hybrid; GBP 59,000 - 70,000; Full time

Job summary

An established industry player is seeking a skilled IT Security Engineer to enhance their internal security framework. This role is pivotal in ensuring the organization remains cyber resilient amidst ongoing IT transformations. The successful candidate will work closely with IT strategy teams to develop security policies, evaluate the security posture, and implement improvements. With a focus on vulnerability management and access controls, this position requires a strong technical background and the ability to lead initiatives that safeguard the organization. Enjoy a competitive salary, comprehensive training opportunities, and a hybrid working model after the initial period.

Benefits

Competitive Salary

Comprehensive Training Opportunities

Early Finish on Fridays

Reduced Working Hours in Summer

Occasional Travel Opportunities

Qualifications

• Proven experience in senior IT security roles, ideally managing a team.
• Strong technical background in IT security and network management.
• Familiarity with cybersecurity standards and best practices.

Responsibilities

• Develop IT security policies and continuously evaluate security posture.
• Collaborate with teams on cybersecurity aspects and monitor security systems.
• Participate in audits and provide management reports on security.

Skills

IT Security

Vulnerability Management

Access Management

Data Protection

Network Routing

Firewalls

Endpoint Security

Cybersecurity Standards (NIST, CIS, ISO)

Education

Degree in Computer Science

Professional Certifications (CISSP, ISSP, ICS2)

Tools

Cisco Tools

Mimecast Mail Protection

Azure Identity Manager

Job description

This role is on–site for the first 6 months, after which hybrid working is an option.

Reed Technology is working with a fantastic Aberdeen based client as they look to add an IT Security Engineer to their team as they continue to strengthen their internal security offering. The successful candidate will have a strong background in IT security with a focus on identifying security risks and consulting on possible solutions, making recommendations around new technologies to use and processes to implement to ensure the organisation is cyber resilient.

This role is perfect for someone who wants to play a vital role ensuring that organisational security is constantly improving amidst ongoing IT transformation projects, and who has a wide range of security skills, including system security, vulnerability management, access management and data protection.

Day–to–day of the role:

• Work within IT strategy teams across the organisation on all aspects of security, as well as liaising with offshore teams on offshore IT security.
• Development of IT security policies and procedures.
• Continuously evaluate the IT security posture of the organisation, identifying areas for improvement and implementing changes accordingly.
• Collaborate with the contracts team on tenders, focusing on cybersecurity aspects.
• Monitor security systems including Azure Identity Manager for risky logins, backup systems, and web filtering.
• Analyse reports from the Security Operations Center (SOC), interpret data, and conduct investigations.
• Manage security certificates and plan the removal of outdated systems.
• Participate in various audits (internal, client, financial, external) and provide quarterly management reports.
• Ensure the security of the supply chain and stay updated with current cybersecurity trends and best practices.
• Research and implement best solutions and practices, ensuring compliance with industry regulations.

Required Skills & Qualifications:

• Proven experience in Senior / supervisory IT Security roles, ideally managing a team.
• Strong technical background in IT security, including network routing, firewalls, access management, and endpoint security.
• Familiarity with security best practices and standards, including NIST, CIS and ISO.
• The ability to identify gaps in the organisations security knowledge and implement plans to improve them.
• Experience with Cisco tools, Mimecast mail protection, and working with certificates and SOC.
• Familiarity with vulnerability management and the ability to take decisive action.
• Relevant degree in Computer Science, Cybersecurity, or a related field is advantageous but not essential.
• Professional certifications such as CISSP, ISSP, or ICS2 are highly regarded.

Benefits:

• Competitive salary range up to 70k, based on experience and qualifications.
• Comprehensive training opportunities tailored to the needs and growth of the selected candidate.
• Normal working hours with early finish on Fridays and reduced working hours during June, July and August.
• Hybrid working model after the initial 6 months on–site.
• Opportunities for occasional travel, including offshore.