IT Security Engineer

Goiko; Greater London; Presencial; GBP 80.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

3 weeks paid time off

11 paid holidays

Health benefits (medical, dental, VSP)

401(k) with company match

Vacation reimbursement / bonus

Descripción de la vacante

Goiko is seeking a Security Engineer to own and advance our security posture, protecting our software from threats and enabling safe product delivery. The role involves hands-on testing, firewall and SOC II management, and enabling secure deployments across cloud environments.

You will collaborate with cross-functional teams, perform red/blue team exercises, and be empowered to halt risky features or deployments to protect the business. A proactive, security-minded professional will thrive here.

Formación

• 3+ years in penetration testing against web applications
• Experience securing cloud infrastructures
• Experience in information security teams
• Knowledge of OWASP top vulnerabilities and best practices
• Familiarity with SOC II controls and audits
• Experience across IT roles (SysAdmin, Helpdesk)
• Strong Linux server knowledge
• Experience with Kanban and Agile DevOps workflows
• Proactive, collaborative, and continuous improvement mindset

Responsabilidades

• Conduct penetration tests against web applications and infrastructure
• Validate security on new hardware/software deployments
• Assist front-line teams with security questions
• Manage firewall rules and internal pentesting
• Oversee SOC II controls and external pentesting
• Prioritize work via backlog system (Jira)
• Contribute to security decision-making and risk mitigation

Conocimientos

Penetration testing

Cloud security

SOC II knowledge

Linux server environments

Security tooling (firewalls, HIDS/HIPS

Agile DevOps / Kanban

Security leadership

Secure coding mindset

Educación

Bachelor's degree in CS/IT

Descripción del empleo

AboutUs

Our mission is simple: we want to set people free to do meaningful work. People love our software--and it turns out that people love working here too. We've been recognized as a "Best Compay to Work For", and we're proud of our team for receiving awards for workplace effectiveness and flexibility.

What You\'ll Do

As our Security Engineer, you\'ll responsible for managing our security posture as well as keeping our application safe from external threats. Our ideal Security Engineer will to be able to manage IT-related security issues, such as firewall management, HIDS/HIPS configuration, log monitoring, and audit compliance (SOC II). Youwill ensure that our software application is both manually and automaticallypentestedfor security vulnerabilities (both Red Team and Blue Team exercises), and be a decision maker in all things security management - able to "pull the plug" on a feature, application, or other business function if it represents a significant risk to the company

You will:

• Conduct penetration tests against web applications infrastructure


• Validate security on new hardware and software infrastructure


• Assist front-line company representatives with security questions


• Manage firewall rules and internal pentesting


• Manage SOC II controls andexternal pentesting


• Manage priorities through backlog management system (Jira)


• Come to work, do great things, then go home!

What You Need to Get the Job Done

• 3+ years experience performing penetration testing (against web applications)


• Experience securing cloud-based infrastructures and solutions


• Previous experience working on an information security team


• Advanced knowledge of common security vulnerabilities (OWASP) and best practices


• Familiarity with SOC II controls and how to review them


• Experience in other technical roles (SysAdmin, Helpdesk, etc.)


• Strong understanding of Linux server environments


• Experience with Kanban and Agile DevOps workflows


• A good attitude and willingness to learn - you\'ll be with great people. You\'re welcome.

What Will Make Us REALLY Love you

• You have a degree in CS, IT, or similar field


• CISSP, Security+, orother security related or linux or cloud related certifications


• Previous scripting experience (Python, Perl, Ruby, or PHP)


• You possess strong time prioritization skills


• You are proactive and look for ways to continuously increase efficiency


• We can see that you have a measured demeanor that assumes the best of people and respects co-workers.


• Real world examples of demonstrated technical leadership

What You\'ll Love About Us

• Great Company Culture. Business Best Companies to Work For (2020 & 2021) and the Sloan Award for Business Excellence in Workplace Effectiveness and Flexibility (2020 & 2021)


• Work that Stays at Work. Genuine work/life balance served here!


• Rest and Relaxation.3 weeks paid time off, 11 paid holidays, andwe pay you to go on vacation(ask us about this!)


• Health Benefits. Medical with HSA and FSA options, dental, and vision


• Prepare for the Future. 401(k) with company match


• Financial Peace University. Take the class,get reimbursed, get a bonus

An Equal Opportunity Employer--M/F/D/V

Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.