Cyber Security Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Safeguard the global enterprise IT environment of the company, ensuring the confidentiality, integrity, and availability of essential business systems.

• Design, execute, and sustain security measures across cloud platforms, networks, endpoints, identity and access management, and collaborative technologies.

• Identify vulnerabilities, monitor security threats, respond to incidents, and promote ongoing enhancements to the organization's security posture.

• Manage vulnerability assessments, including security scans, reporting, and communication with stakeholders.

• Evaluate new AI tools and models to determine appropriate security measures.

• Conduct security evaluations of infrastructure, network designs, and both cloud and on-premise systems.

• Perform security posture assessments on Microsoft 365, Azure, websites, and other external-facing assets.

• Act as a representative for security in product review boards.

• Assist in the collection and dissemination of monthly Cyber Security Board data, including patching Service Level Agreements (SLA).

• Provide security assessments and architectural reviews for systems transitioning to Legato.

• Engage in the AI governance forum, overseeing AI policies, review processes, and governance.

• Develop, review, and authorize cybersecurity policies.

• Lead incident response efforts for security events and data breaches.

• Collaborate with legal, HR, and operations teams on insider threat investigations, preservation of forensic evidence, and regulatory breach notifications.

• Organize and oversee security audits and penetration testing.

• Prepare and deliver security reports to management.

• Manage and maintain security tools and technologies, including Tenable and Microsoft Defender.

• Monitor and track the remediation of identified vulnerabilities.

• Oversee and report on user behavioral analysis, awareness training, and social engineering initiatives.

• Support compliance projects, remediation efforts, and the HBK Cyber Security Transformation program.

⛳️ Requirements

• Proven hands-on experience in security within a complex manufacturing environment.

• Background in safeguarding enterprise IT environments across manufacturing, engineering, and corporate functions.

• Familiarity with cloud platforms, networks, endpoints, identity and access management, and collaboration technologies.

• Proficient in identifying vulnerabilities, monitoring security threats, and responding to incidents.

• Knowledgeable about security controls, compliance with industry standards and regulations, security assessments, and remediation processes.

• Experience in contributing to security architecture and technology roadmaps.

• Familiarity with security assessments for AI tools and models.

• Experience evaluating cloud and on-premise infrastructure, network designs, and systems.

• Proficient in Microsoft 365, Azure, and external-facing assets.

• Experienced in vulnerability management and conducting security posture checks.

• Skilled in leading incident response activities, including detection, containment, eradication, and post-incident analysis.

• Experience with insider threat investigations, preservation of forensic evidence, and regulatory breach notifications.

• Capable of organizing and managing security audits and penetration tests.

• Experienced in managing security tools such as Tenable and Microsoft Defender.

• Proficient in monitoring the remediation of vulnerabilities.

• Experience with user behavioral analysis, awareness training, and social engineering campaigns.

• Knowledgeable about improvements in identity and access management.

• Experienced in supporting compliance projects and remediation initiatives.

• Familiar with supporting cybersecurity transformation programs.

🏝️ Benefits

• Flexible and collaborative work environment.

• Opportunities for professional growth.

• Support for work-life balance.

• Chance to work with cutting-edge technologies.

• Opportunity to influence technical direction.

• Ability to help shape the future of software engineering within a leading global technology firm.