Senior Security Engineer

Lorien; Reading; On-site; GBP 125,000 - 150,000; Full time

Job summary

A forward-thinking company is seeking a Security Engineer to provide expert input on IT and business projects, ensuring security is embedded from the start. This role involves collaborating with project stakeholders, conducting security risk assessments, and developing security-related artifacts to support consistent security practices. Ideal candidates will possess relevant qualifications like CISSP or CISM and have a solid background in Information Security processes across various technologies. Join this innovative team and help shape secure project outcomes in a dynamic environment focused on renewable energy and utilities.

Qualifications

• Relevant qualifications such as CISSP or CISM are essential.
• Experience in Information Security processes covering various technologies.

Responsibilities

• Liaise with stakeholders as an Information Security SME throughout project lifecycle.
• Perform security risk assessments and track security requirements.

Skills

Information Security

Risk Assessment

Security Architecture

Analytical Skills

Problem-Solving

Education

CISSP

CISM

Tools

Security Technologies

Web Applications

Service-Oriented Architectures

Job description

Our client is looking for a Security Engineer to provide SME input to in-flight IT and Business projects to embed security requirements, manage risks and enable security by design.

RESPONSIBILITIES

1. Liaise with project stakeholders as an Information Security SME throughout the project lifecycle, including representing the Information Security Advisory team at stage gate meetings.
2. Perform security risk assessments against projects to determine control requirements and track and report on security requirements levied on projects/initiatives through to successful implementation.
3. Develop security-related project artefacts/patterns to support consistent security input to projects.
4. Perform controls validation to ensure that any initial requirements were implemented as expected.
5. Identify and document any residual risks and engage with the Information Security Risk team to ensure these are tracked and managed.
6. Work collaboratively with the wider Information Security function, Enterprise Architecture & Service Transition team to ensure a consistent approach to embedding security into projects.

PERSONAL PROFILE

1. Relevant academic or industry relevant qualifications such as CISSP, CISM.
2. Experience and knowledge of Information Security processes & technologies spanning networks, applications, mobile devices and web related technologies (web applications, web services, service-oriented architectures).
3. Demonstrable security architecture background.
4. Familiar with secure system development processes.
5. Strong interpersonal skills.
6. Strong analytical and problem-solving capabilities.
7. Capable of working in a team or unsupervised to the same level of quality.

APPLY NOW!

Seniority level

Mid-Senior level

Employment type

Contract

Job function

Information Technology and Other

Industries

Services for Renewable Energy, Utilities, and Oil and Gas