Information Security Design Engineer

Intuition IT Solutions Ltd; West Midlands; On-site; GBP 55,000 - 90,000; Full time

Job summary

Intuition IT Solutions Ltd is seeking an Information Security Engineer to design, implement and maintain secure systems across the lifecycle. You will document technical designs, implement security controls, and balance prevention, detection and usability while aligning with standards.

Responsibilities include developing security products, integrating protections into complex systems (including cloud), and producing operator-friendly documentation for implementation and operation teams.

Qualifications

• Requires 3+ years in information security operations/engineering
• Experience documenting detailed designs and security controls
• Knowledge of cyber security laws and cloud development techniques
• Experience implementing security components in systems
• Familiarity with Security Development Lifecycle and secure coding practices

Responsibilities

• Protect organization by engineering secure solutions from inception to retirement
• Develop information security products using security components and methodologies
• Integrate security products into complex, including cloud-based, systems
• Produce documentation to guide implementers and operators

Skills

Information security design

Security design patterns

Cloud security

Secure SDLC

Agile SCRUM/SAFe

Problem-solving

Communication

Education

Degree-level or extensive relevant experience

Industry certifications (CCSP/CISSP/BCS)

Tools

Cryptographic solutions

Job description

The Information Security Design and Engineering Team are responsible for the design, engineering, technical delivery, maintenance and improvements of the systems and applications for the Information Security Office. We are expected to add value by improving these tools through tuning, enhancements, and improved adoption. Working alongside the other areas of Technology and the Information Security Office, we ensure that solutions delivered meet industry best practice and compliance requirements.

As an Information Security Engineer, you will be responsible for the development and updating of systems or products, in conformance with agreed security requirements and standards, throughout its life cycle. You will document the technical designs, implementation and tuning of a combination of security controls to balance prevention, detection, response and useability. This could involve detailed technical design, coding, or hardware prototyping, debugging and documentation.

Key Accountabilities

• To proactively protect us in engineering secure solutions from inception to retirement, reducing the risk of a cyber event impacting customers, colleagues or reputation.
• Development of information security products using components, tools, techniques, and methodologies which minimise the chance of creating vulnerabilities in the products
• Integration of security products into more complex systems, including cloud-based systems
• Produce documentation on the products and services to guide implementers, system operators and administrators and,

Experience

In order to succeed in this role, it is expected that you will have three or more years' experience in:

• Working within information security operations and engineering functions
• Development and documentation of detailed designs
• Cyber security and data protection regulations
• Cloud development techniques
• Configuring and implementing software and hardware security components, including cryptographic solutions
• Secure development standards, such as Security Development Lifecycle
• 'Agile' techniques and methodologies, such as SCRUM, SAFe, continuous Development, Continuous Integration and Continuous Testing
• Mentoring and people development

Knowledge and experience in one or more of the following areas

• Identify & Access Management
• Endpoint Protection
• Network Security
• Office 365 & Email Security
• Application Security
• Cloud Platform Security
• Operational Technology Security

Personal attributes

In order to succeed in this role, it is expected that you will have:

• Ability to work effectively across teams to promote information security design and best practice across the wider technology and business team.
• Problem-solving and logical thinking
• Strong influencing skills, working with other teams and bringing experience from other technologies in applying remediation.
• Good time management, presentation and communication skills are essential, as is the ability to work in a high-pressure environment.
• The ability to balance local needs vs. organisation wide strategy to make informed decisions

Preferred

• Degree level or extensive relevant experience
• Have achieved an industry recognised certification, such as CCSP, CISSP, a BCS certificate in information security management
• Hold or be capable of gaining SC Clearance