IT Security Engineer, Cybersecurity & Platform Security

DTCC; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Competitive compensation

Health and life insurance

Pension

Hybrid schedule

Job summary

DTCC в Лондоне ищет инженера по облачной безопасности для поддержки и развития инфраструктуры безопасности в AWS, Azure и GCP. В обязанности входит анализ инцидентов, устранение нарушений и внедрение автоматизации.

Кандидат должен иметь опыт работы с CSPM, CNAPP и инструментами SecOps, знание IAM и стандартов безопасности. Гибридный режим работы: 3 дня в офисе, 2 — удалённо.

Qualifications

• Опыт обеспечения безопасности облачных сред AWS, Azure и/или GCP.
• У hands-on опыт CSPM, CNAPP, управления уязвимостями и инструментов безопасности.
• Знание IAM, мониторинга безопасности и соблюдения требований.
• Опыт идентификации и устранения рисков и ошибок конфигурации.
• Знакомство с NIST, CIS Benchmarks, ISO 27001.
• Навыки автоматизации скриптами (Python, PowerShell, Bash, Terraform).

Responsibilities

• Эксплуатация и поддержка облачных платформ безопасности в AWS, Azure и GCP.
• Расследование уязвимостей, несоответствий и помощь в их устранении.
• Внедрение и поддержка контрольных мер, базовых конфигураций и мониторинга.
• Разработка скриптов и процессов для повышения эффективности и реагирования.
• Подготовка документации, процедур и руководств по работе с безопасностью в облаке.
• Участие в инцидент-response и анализе причин.
• Выполнение дополнительных обязанностей по запросу.

Skills

Cloud security

Automation scripting

Cloud platforms

Education

Bachelor's degree

Tools

Wiz

Qualys

CrowdStrike

AquaSec

Job description

Описание:

DTCC provides secure, reliable technology solutions and high-quality information that support the global capital markets.

Задачи:

• Operate and support cloud security platforms and services across AWS, Azure, and GCP, including CSPM, CNAPP, vulnerability management, compliance monitoring, and identity security solutions
• Investigate and analyze cloud security findings, vulnerabilities, misconfigurations, and compliance gaps, and assist with remediation in partnership with application and infrastructure teams
• Implement and maintain cloud security controls, baselines, monitoring capabilities, and security automation solutions
• Develop and enhance scripts, workflows, and automation to improve operational efficiency, security coverage, and response times
• Create and maintain technical documentation, operational procedures, runbooks, and knowledge articles for cloud security operations
• Participate in incident response, troubleshooting, root cause analysis, and continuous improvement activities related to cloud security services
• Perform additional responsibilities beyond those listed

Требования:

• Experience securing cloud environments in AWS, Azure, and/or GCP
• Hands-on experience with CSPM, CNAPP, vulnerability management, and security tooling such as Wiz, Qualys, CrowdStrike, AquaSec, or similar platforms
• Knowledge of cloud identity and access management, security monitoring, and compliance practices
• Experience identifying, investigating, and remediating security risks, vulnerabilities, and cloud misconfigurations
• Familiarity with cloud security frameworks and standards such as NIST, CIS Benchmarks, and ISO 27001
• Experience with automation and scripting using Python, PowerShell, Bash, Terraform, or similar technologies
• Ability to learn and manage new technologies
• Strong analytical, troubleshooting, communication, and problem-solving skills
• Будет плюсом: a bachelor's degree or equivalent experience, an industry-recognized cybersecurity or cloud certification such as Security+, AWS Security Specialty, Azure Security Engineer, CCSP, or CISSP

Условия:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits
• Pension
• Paid time off, personal/family care, and other leaves of absence
• Flexible/hybrid schedule: 3 days onsite and 2 days remote; onsite Tuesdays, Wednesdays, and a third day of your choosing
• Training and development opportunities