Cyber Security Engineer

Responsibilities

• Assist with the Cyber security Uplift including but not limited to:
• Assess solution designs, review application configurations, and advise project teams, working to the ISM and security best practice.
• Support delivery of projects associated with core corporate systems including Identity and Access Management (IDAM), employee records management, security tooling and enterprise security systems.
• Review and evaluation of the configuration of systems, including applications, firewalls and databases.

Essential skills and experience

• Have the ability to obtain a baseline security clearance
• Technical background in one or more of: identity and access management, application development, network engineering, systems administration, data science and/or database administration. Identity and access management will be the initial focus of the role but all areas are of interest
• Strong communication skills and teamwork, including working with development teams, project managers, vendor partners, and management as well as familiarity with communication tools such as ticket tracking, emails, data flow diagrams, architecture diagrams and code comments
• Experience securely integrating commercial products such as identity management systems, authentication, databases and ERP systems
• Understanding of security principles, including knowledge of the ISM controls or a similar framework such as the OWASP web testing guide
• Knowledge of the ISM, the OWASP top ten or other similar software assessment frameworks
• Demonstrated capability in reducing vulnerabilities in organisations
• Demonstrated problem-solving ability and experience working on wide variety of projects
• Experience working in a Linux environment including the use of security testing tools

Nice-to-have skills and experience

• Experience with modern automation and orchestration technologies, including continuous integration, automated testing and deployment
• Knowledge of emerging technologies in the cybersecurity space including malware detection, behavioural analytics, artificial intelligence and machine learning and security automation
• Knowledge of OWASP Testing Guide
• Knowledge of secure coding practises, including common security weaknesses and how to identify them in multiple languages
• Data science, data analytics, data engineering, machine learning, statistics, charting or visualisation
• Knowledge of emerging technologies in the cybersecurity space including malware detection, behavioural analytics, artificial intelligence and machine learning and security automation

Salt is acting as an Employment Business in relation to this vacancy.