Security Engineer

Lamb Personnel ltd; Redhill; On-site; GBP 65,000 - 90,000; Full time

Job summary

Lamb Personnel ltd is seeking a Security Engineer for a global organisation with HQ in Redhill, Surrey. The role focuses on developing information security plans and policies, embedding them into operations, and implementing protective measures across internal and customer networks.

You will monitor security events, investigate incidents, and provide guidance to teams on threats such as phishing and CVEs. The successful candidate will have extensive multi-network experience and knowledge of

Qualifications

• A minimum of 5 years multi-network exposure and hands-on experience designing and managing secure networks.
• Experience with Cisco Firewalls/Routers/Switches and Juniper platforms.
• Knowledge of ISO27001 and GDPR.

Responsibilities

• Develop and embed information security plans and policies with management and compliance functions to embed security management plans into operational practice.
• Implement protections and solutions to enforce information security plans and policies.
• Monitor and collate information from monitoring tools and third parties to provide an accurate view of current security posture including events, risks and treatment plans.
• Investigate and resolve security incidents from logs, tools and partners.
• Educate and advise teams on handling security threats such as phishing, alerts, CVEs, etc.
• Oversee the life-cycle security of internal and customer networks, testing for vulnerabilities and recommending improvements.
• Support IT & Engineering teams with cybersecurity advice on network design and management.
• Create documentation around policies, procedures and events.

Skills

Security

Network security

Policy development

Incident response

Tools

Cisco Firewalls

Juniper platforms

SIEM

IDS/IPS

Penetration testing tools

Vulnerability Management

Job description

Security Engineer required for global organisation with HQ in Redhill; Surrey.

Main Purpose of Job

• Developing the information security plans and policies for the company and Customers working with Security Management and Compliance functions to embed security management plans into operational practice
• Implementing protections and solutions to ensure and enforce the information security plans and policies
• Monitoring and collating information from monitoring tools as well as third parties to provide an accurate view of the current security position of the organisation and customers including security events, ongoing risks and treatment plan
• Investigation and resolution of security incidents events logged by staff members, monitoring tools and security partners.
• Educating and advising team members on the handling security threats e.g. suspicious emails, security alerts, CVE, etc.
• To have responsibility for the through life security of both internal and customer networks/systems as required by the company testing for vulnerabilities and recommending improvements.
• To participate and support all internal IT & Engineering teams including providing advice and expertise on the design and management of internal, customer and global networks from a cybersecurity perspective.
• Creating documentation around policies, procedures and events.

Technical expertise:

• Security
• Be the centre of excellence for network and device security
• Lead by example and develop and maintain personal and group technical expertise in company bespoke products and security ensuring integrity and security of networks;
• Good working knowledge & experience of
  • Cisco Firewalls, Routers&Switches,
  • Compliance standards (ISO27001 and ITIL)
  • Security tools sets (SIEM, IDS/IPS)
  • Pen Testing tools
  • Vulnerability Management
• Design, build, test, commission and troubleshoot security solutions (IDS/IPS, SIEM) on internal and customer networks
• Experience developing and maintaining policies, procedures, standards and guidelines
• Write and maintain configuration/reconfiguration documentation, schematics, support guides and other documentation as required.
• Share knowledge, train, support and develop individuals internally on security management
• Work across the IT, Enterprise and Hub Engineering teams in support of own and customer networks.

Experience/Skills/Qualifications:

• A minimum of 5 years multi network exposure including hands on experience of designing and managing secure networks including the following systems:
  • Cisco Firewalls, Routers, Switches
  • Juniper platforms
  • SIEM tools
  • IDS/IPS
  • Penetration testing (PEN Testing)
  • Computer Forensic tools
  • ISO27001 & GDPR knowledge
• Ability to communicate network security issues to peers and management
• Ability to absorb and quickly gain and retain knowledge of bespoke products & satellite services
• Must be able to demonstrate technical competency in all they do with a right first time, every time attitude.
• Excellent customer support skills and ability to interact with customers both on the phone and in meetings
• Must hold, or have the ability to easily achieve SC Security Clearance.
• A well organised, pro-active and can-do attitude.
• Effective communicator with an eye for detail and accurate planning skills

Desirable:

• Telecommunications background
• UK MOD/Government networks experience.

Point of contact:

To support the IT Manager and IT team in ensuring the highest levels of network and device security.

• To be the key expert in CyberSecurity Design/Management for the company and customers as required
• Final point of contact for security issues including trouble shooting and resolving to sometimes tight timescales.
• Be involved within the company Incident Management scheme.
• To liaise with other departments as required to ensure full support of networks and knowledge.
• Providing appropriate technical advice regarding complex cybersecurity problems.
• Following up and driving issues through to satisfactory completion.
• Identifying training needs to ensure consistency of service
• Appropriate planning of maintenance and outage