Your responsibilities
Own and enhance security configurations across the organisation’s security tooling, ensuring that controls and policies are appropriately designed, implemented, maintained and optimised.
Identify and address security gaps by conducting technical assessments, analysing security configurations, evaluating control effectiveness and driving remediation activities.
Monitor and assess the organisation’s security posture, identifying emerging risks, control weaknesses and opportunities to strengthen cyber resilience across infrastructure and supporting processes.
Manage complex security-related changes and requests, assessing their technical implications and associated risks, ensuring appropriate approvals and coordinating implementation with relevant teams.
Provide technical expertise and guidance to other Security Infrastructure team members, supporting troubleshooting, knowledge sharing and the resolution of complex security issues.
Evaluate and optimise security tooling and controls, identifying opportunities to improve detection, prevention, protection and operational efficiency through automation and enhanced configuration.
Work closely with internal IT, Cyber Security and business teams, as well as external service providers to resolve issues and deliver security improvements.
Prepare and communicate technical assessments, risk findings, remediation plans and security posture updates to relevant stakeholders, translating technical issues into clear business implications and recommended actions.
Contribute to security initiatives and projects, providing subject-matter expertise, supporting implementation activities and ensuring that security requirements are incorporated into technology changes.
Operate across a diverse technology environment, covering networks, cloud platforms including Azure and GCP, end-user workstations and OT environments.
The experience we're looking for
Strong knowledge of information security principles, including security risk management, threat and vulnerability management, identity and access management and security control effectiveness.
Substantial hands-on experience with security infrastructure and technologies, including the configuration, administration, troubleshooting and optimisation of security controls.
Practical experience managing firewalls and/or secure web gateways, including policy configuration, rule review, troubleshooting and security configuration optimisation.
Broad understanding of security controls and technologies, including endpoint and malware protection, vulnerability management, intrusion detection and prevention, network security, proxies, gateways and access controls.
