Security Engineer

About the role

As Security Engineer you will implement, maintain and continuously improve security controls and platforms that protect the organisation's enterprise environments. You turn security architecture standards into operational capabilities across cloud, infrastructure, application and data protection domains, working closely with cybersecurity, IT and engineering teams. The role supports business operations, digital transformation initiatives and overall cybersecurity resilience.

Key responsibilities

• Implement and support security solutions across cloud security, infrastructure security, data protection, application security/DevSecOps and security platform engineering.
• Build, configure, integrate and optimise security tools and controls for operational effectiveness and measurable outcomes.
• Support security architecture and risk reviews with technical expertise and implement required controls.
• Apply application security controls and DevSecOps practices in CI/CD pipelines and software delivery.
• Maintain engineering baselines, hardening standards and configuration benchmarks.
• Automate security controls and processes using scripting and infrastructure-as-code in cloud and hybrid environments.
• Create and maintain technical documentation, runbooks and standards.
• Work with Cyber Defense Operations to ensure controls generate telemetry and logging for monitoring, detection and response.
• Support global deployment and maintenance of security solutions and partner with IT teams on planning, troubleshooting and readiness.
• Promote consistent control implementation and support governance of approved exceptions and risk management.

Required profile

• Bachelor's degree in Computer Science, Information Security, Engineering or a related technical field.
• Minimum 4 years of experience in security, infrastructure, cloud or similar engineering roles with hands-on implementation.
• Experience designing, deploying and operating security controls in cloud-native and hybrid environments.
• Fluent English; knowledge of security engineering best practices, secure configuration standards, IaC, automation and enterprise controls.
• Strong communication with technical and non-technical stakeholders, problem-solving and documentation skills.

Required skills

• Cloud security, infrastructure security, application security/DevSecOps or data protection
• Infrastructure-as-code and security automation
• Certifications are an advantage