Security Engineer-UK

Certinia; Austin (TX); In loco; GBP 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

Certinia in the United Kingdom is seeking a Security Engineer to bridge triage and security architecture, moving beyond monitoring to active investigation and automation across cloud platforms.

You will help maintain SOC capabilities, perform offensive security tasks, and collaborate with senior engineers. The role reports to the Head of Information Security and offers growing responsibility in cloud security and threat response.

Competenze

• 1–3 years hands-on experience in Information Security, SOC, or a related technical field.
• Deep understanding of networking (TCP/IP), OS (Linux/Windows/macOS), and web app security (OWASP Top 10).
• Practical experience securing resources in at least one major cloud provider (AWS, Azure, or GCP).
• Proficiency in Python, Bash, or similar languages for automation and parsing logs.
• Demonstrated ability to investigate security events, analyze logs, and understand MITRE ATT&CK framework.
• Ability to explain security risks to non-security colleagues (e.g., developers or IT staff).

Mansioni

• Security Operations & Threat Management Support.
• Perform deep‑dive investigations and root cause analysis of alerts.
• Execute phases of Incident Response independently, including containment and eradication.
• Execute Phishing Triage, analyzing reported emails and validating threats.
• Assist day‑to‑day monitoring of the SIEM platform and triage events.
• Perform proactive threat hunting using intelligence feeds for IoCs.
• Triage reports to the public Bug Bounty Program.
• Offensive security: run internal penetration tests with limited supervision.
• Support red team exercises and simulate adversary behaviors.
• Design and launch phishing simulations to identify training gaps.
• Implement and maintain IAM policies, security groups, and encryption in cloud environments.
• Analyze CNAPP dashboards to validate alerts and detect threats.
• Write scripts to automate IR/DR steps and create detections.
• Review internal tools and provide feedback to development teams.

Conoscenze

Security operations

Threat hunting

Incident response

Python

Bash

Cloud security

Networking

IAM policies

Strumenti

SIEM

Docker

Kubernetes

CNAPP dashboards

Descrizione del lavoro

Who We Are

Certinia delivers a Services-as-a-Business platform that powers and connects all aspects of services operations, from services estimation and delivery to customer success management and financial planning and accounting. The company’s Professional Services Automation (PSA), Customer Success (CS), and Financial Management (FM) solutions—delivered on Salesforce’s leading cloud platform—provide the ability to run a connected services business, deliver with intelligence, and achieve business agility. Headquartered in Austin, Texas with presence around the world, Certinia is backed by Haveli Investments, TA Associates, General Atlantic and Salesforce Ventures. For more information, visit www.certinia.com.

Security Engineer (UK)

Certinia delivers a Services-as-a-Business platform that powers and connects all aspects of services operations, from services estimation and delivery to customer success management and financial planning and accounting. The company’s Professional Services Automation (PSA), Customer Success (CS), and Financial Management (FM) solutions—delivered on Salesforce’s leading cloud platform—provide the ability to run a connected services business, deliver with intelligence, and achieve business agility. Headquartered in Austin, Texas with presence around the world, Certinia is backed by Haveli Investments, TA Associates, General Atlantic and Salesforce Ventures. For more information, visit www.certinia.com.

THE ROLE

The Security Engineer will be a hands‑on technical contributor, acting as a bridge between initial triage and high‑level security architecture. You will move beyond simple monitoring to active investigation, incident handling, and the implementation of security controls. This role requires the ability to work independently on routine security operations while collaborating with senior engineers on complex threat scenarios and cloud architecture. You will be responsible for maintaining SOC capabilities, executing offensive security tasks, and assisting with automation efforts. This role reports to the Head of Information Security.

What You Will Do In This Role

• Security Operations & Threat Management Support:
• Perform deep‑dive investigations and root cause analysis of alerts.
• Execute specific phases of Incident Response (IR) procedures independently, including containment, eradication, and post‑incident review.
• Execute the Phishing Triage process, analyzing reported emails, and validating threats.
• Assist with the day‑to‑day monitoring of the SIEM (Security Information and Event Management) platform, including triage of incoming events.
• Perform proactive threat hunting using intelligence feeds to search for indicators of compromise (IoCs) within the network and cloud environments.
• Perform initial triage of incoming reports to our public Bug Bounty Program.
• Offensive security:
• Execute internal penetration tests on applications and cloud infrastructure with limited supervision, following established methodologies.
• Support red team exercises by executing specific attack vectors and helping to simulate adversary behaviors.
• Design and launch phishing simulations, analyzing the results to identify training gaps and improve human awareness.
• Security Engineering & Cloud Focus:
• Implement and maintain specific security controls within cloud environments (AWS, Azure, GCP), such as IAM policies, security groups, and storage encryption configurations.
• Assist in analyzing CNAPP dashboards to validate incoming alerts and detect legitimate threats.
• Write scripts (e.g., Python, Bash) to automate IR/DR steps, accelerate log analysis, or create custom detections or analyzers.
• Perform security reviews of internal tools and new features, providing actionable feedback to development teams.

What You Need To Be Successful In This Role

• 1–3 years of hands‑on experience in Information Security, SOC, or a related technical field.
• Deep understanding of networking (TCP/IP), operating systems (Linux/Windows/macOS), and web application security (OWASP Top 10).
• Practical experience securing resources in at least one major cloud provider (AWS, Azure, or GCP).
• Proficiency in Python, Bash, or similar languages for automation and parsing logs.
• Demonstrated ability to investigate security events, analyze logs, and understand the lifecycle of a cyber attack (MITRE ATT&CK framework).
• Ability to solve technical problems with minimal guidance and manage your own queue of tasks.
• Ability to explain security risks to non‑security colleagues (e.g., developers or IT staff).

What Else Would Be Great

• eJPT, GSEC, CySA+, SSCP, or Associate‑level Cloud Security certifications (e.g., AWS Certified Security – Specialty).
• Familiarity with Docker and Kubernetes security concepts.
• Experience with SAST/DAST tools or code review.
• A history of participation in CTFs, Hack The Box, or contributions to the security community.