Senior Cybersecurity Engineer

We are looking for a hands-on Senior Cybersecurity Engineer to manage and support enterprise encryption, cryptographic key-management and HSM environments for a large government-related organisation.

This is a specialist security-engineering role, not a SOC, GRC or people-management position. You will be responsible for ensuring critical systems, sensitive data and cryptographic keys remain secure, available and audit-ready.

Key responsibilities:

• Administer, configure, upgrade and support Thales CipherTrust Manager / Data Security Platform and Luna HSM environments
• Manage the full cryptographic key lifecycle, including key creation, rotation, backup, recovery, revocation and secure destruction
• Configure and support Luna HSM partitions, client connectivity, high-availability groups, secure backups and disaster-recovery capability
• Deliver and support encryption, tokenisation, masking and database/file-encryption use cases
• Integrate CipherTrust and HSM services with applications, databases, middleware, PKI, identity platforms and cloud services
• Investigate and resolve complex L3 incidents involving encryption, certificates, key access, HSM connectivity and platform availability
• Monitor platform health, certificate expiry, key activity, access controls and suspicious administrative activity
• Produce technical documentation, operational procedures and audit evidence
• Work closely with infrastructure, application, database, cyber and audit teams on new deployments and changes

Key requirements:

• Proven production experience with Thales CipherTrust Manager, CipherTrust Transparent Encryption and/or Thales Luna HSM
• Strong knowledge of encryption, cryptography, hardware security modules, key management and PKI
• Experience with technologies such as KMIP, PKCS#11, REST APIs, JCE and Microsoft CNG/CAPI
• Exposure to databases, Linux/Windows, networking, clustering, high availability and disaster recovery
• Experience supporting regulated environments and frameworks such as NCA, SAMA, PCI DSS, FIPS or ISO 27001 is highly desirable
• Strong troubleshooting skills and the ability to operate independently in a live production environment

Salt is acting as an Employment Agency in relation to this vacancy.