security engineer for AI systems

Fortegra; Greater London; Vor Ort; GBP 55.000 - 93.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Dental insurance

Company paid disability

Zusammenfassung

Fortegra ищет специалиста по информационной безопасности в Великобритании для защиты облачных и локальных сред, внедрения и поддержки SIEM, EDR/XDR, SOAR, CSPM и др.

Ключевые задачи включают реагирование на инциденты, моделирование угроз, тестирование на проникновение, обеспечение безопасной разработки, управление цепочкой поставок ПО и внедрение Zero Trust. Опыт работы с AWS/Azure/GCP приветствуется.

Qualifikationen

• 4+ года в информационной безопасности/инженерной безопасности
• ,
• ],
• job_responsibilities_description':[
• Мониторинг и настройка SIEM, EDR/XDR, SOAR, DLP, CSPM
• Руководство расследованиями инцидентов, включая триages, анализ, локализацию и восстановление
• Разработка и поддержка детекторов в соответствии с MITRE ATT&CK
• Проведение учений, purple-team, и учений по управлению инцидентами
• Обеспечение базовых установок для рабочих станций, серверов, облачных ресурсов и контейнеров
• Участие в тестировании на проникновение и аудитах по кибербезопасности
• Обеспечение безопасной разработки и цепочки поставок ПО
• Разработка политики и процессов в области ИБ и ИИ

Aufgaben

• Мониторинг и настройка SIEM, EDR/XDR, SOAR, MSP DLP и CSPM
• Руководство расследованиями инцидентов, включая триаж, анализ, локализацию, устранение и восстановление
• Разработка детекторов в соответствии с MITRE ATT&CK и моделью угроз
• Проведение учений, purple-team и инцидентов
• Сопровождение и обновление инструкций по реагированию
• Управление исправлениями для краев, серверов, облака и контейнеров
• Проектирование и оценка тестирований на проникновение и аудитов безопасности
• Поддержка безопасной разработки и политики поставок ПО
• Интеграция и настройка тестов безопасности в CI/CD
• Обеспечение Zero Trust и IAM-политик

Kenntnisse

Information security

Incident response

Cloud security

CI/CD security

Threat modeling

Zero Trust

AI/LLM security

Python/PowerShell/Bash/Go

Communication

Ausbildung

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

SIEM

EDR/XDR

SOAR

WAF

CSPM

DLP

CI/CD security

IAM/Sso/MFA

Jobbeschreibung

Описание

Fortegra provides insurance services and safeguards organizational data, applications, infrastructure, and AI systems across on-premises, cloud, and SaaS environments.

Задачи

Monitor and tune SIEM, EDR/XDR, SOAR, email security, DLP, and CSPM solutions; Lead investigations into escalated security incidents, including triage, forensic analysis, containment, eradication, and recovery; Develop and maintain detections aligned with MITRE ATT&CK and the organization’s threat model; Conduct tabletop exercises, purple-team engagements, and incident management drills; Maintain incident response runbooks and playbooks; Lead vulnerability remediation across endpoints, servers, cloud workloads, containers, and SaaS applications; Design and execute vulnerability assessments, penetration tests, red‑team exercises, and security audits; Maintain hardened security baselines for workstations, servers, cloud resources, containers, and network devices; Consume and operationalize threat intelligence; Design, implement, and review cloud security controls; Advance the organization’s Zero Trust strategy; Review Infrastructure-as-Code manifests and maintain policy‑as‑code guardrails; Partner with IT and identity teams on IAM, SSO, MFA, privileged access management, and conditional access policies; Enforce secure coding practices and deliver annual secure‑development training; Integrate and tune security testing in CI/CD pipelines; Establish and maintain software supply chain controls, including SBOM generation and dependency review; Lead threat‑modeling sessions for new products, services, and AI‑enabled features; Define and enforce policies for the safe adoption and use of AI tools; Assess and mitigate AI/ML security risks; Apply AI security frameworks when evaluating vendors, internal AI products, and AI‑generated code; Review AI‑generated code for security vulnerabilities and licensing issues; Partner with Legal, Privacy, and Engineering on AI data handling, retention, and disclosure practices; Evaluate and deploy AI‑assisted security tooling; Build lightweight automations and scripts to streamline security workflows; Validate the accuracy and safety of AI‑driven security tooling and document its operating envelope; Prepare for and respond to internal and external IT audits and risk assessments; Recommend and assist with deploying, integrating, and configuring security solutions; Maintain current knowledge of security threats, defensive tooling, and AI‑related risks; Provide periodic on‑call support for security incidents; Perform other assigned duties.

Требования

Bachelor’s degree in Computer Science, Information Security, or a related technical field, or equivalent professional experience; 4+ Years of experience in information security, security engineering, or a closely related role; Experience with cybersecurity frameworks including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, and MITRE ATT&CK; Hands‑on experience securing AWS, Azure, or GCP environments; Experience with vulnerability management, patching, and remediation across servers, endpoints, containers, and cloud workloads; Experience integrating security into CI/CD pipelines; Incident response experience covering triage, containment, eradication, recovery, and post‑incident review; Familiarity with AI/LLM security concepts and related frameworks; Hands‑on experience with SIEM, EDR/XDR, SOAR, WAF, CSPM/CNAPP, vulnerability management, DLP, email security, and identity‑centric controls; Working knowledge of cloud‑native and container security; Experience with Python, PowerShell, Bash, or Go; Familiarity with secure software development, CI/CD security, and software supply chain risk; Working knowledge of IAM concepts including SSO, MFA, PAM, and Zero Trust; Awareness of AI/LLM security risks and responsible use of AI tooling; Working knowledge of laws and regulations related to security, data privacy, and AI; Strong analytical, communication, and documentation skills, with the ability to explain technical risk to non‑technical stakeholders; Nice to have: CISSP, CCSP, Security+, CISM, GIAC, OSCP, AI/ML security credentials.

Условия

€65,000 - €110,000 Base salary, commensurate with experience; Full benefit package including medical, dental, life, vision, company paid short/long term disability, 401(k), tuition assistance and more; Periodic on‑call support is required.