IT Security Engineer
Primary stack
Nice to have's
Job description
About the Position
Join our team as an IT Security Engineer in Mayfair, London, safeguarding our software from external threats and ensuring compliance with SOC II.
About Us
Our mission is simple: we want to set people free to do meaningful work. People love our software-and it turns out that people love working here too. We've been recognized as a "Best Company to Work For", and we're proud of our team for receiving awards for workplace effectiveness and flexibility.
Responsibilities
As our Security Engineer, you'll be responsible for managing our security posture as well as keeping our application safe from external threats. Your duties will include:
- Conducting penetration tests against web applications infrastructure
- Validating security on new hardware and software infrastructure
- Assisting front-line company representatives with security questions
- Managing firewall rules and internal pentesting
- Managing SOC II controls and external pentesting
- Managing priorities through backlog management system (Jira)
- Ensuring our software application is both manually and automatically pentested for security vulnerabilities (both Red Team and Blue Team exercises)
- Being a decision maker in all things security management - able to "pull the plug" on a feature, application, or other business function if it represents a significant risk to the company
Requirements
- 3+ years experience performing penetration testing (against web applications)
- Experience securing cloud-based infrastructures and solutions
- Previous experience working on an information security team
- Advanced knowledge of common security vulnerabilities (OWASP) and best practices
- Familiarity with SOC II controls and how to review them
- Experience in other technical roles (SysAdmin, Helpdesk, etc.)
- Strong understanding of Linux server environments
- Experience with Kanban and Agile DevOps workflows
- A good attitude and willingness to learn
Nice to Have
- Degree in CS, IT, or similar field
- CISSP, Security+, or other security related or Linux or cloud related certifications
- Previous scripting experience (Python, Perl, Ruby, or PHP)
- Strong time prioritization skills
- Proactive attitude and continuous efficiency improvement
- Measured demeanor that assumes the best of people and respects co-workers
- Real-world examples of demonstrated technical leadership
We Offer
- Great Company Culture. Utah Business Best Companies to Work For (2020 & 2021) and the Sloan Award for Business Excellence in Workplace Effectiveness and Flexibility (2020 & 2021)
- Work that Stays at Work. Genuine work/life balance served here!
- Rest and Relaxation. 3 weeks paid time off, 11 paid holidays, and we pay you to go on vacation (ask us about this!)
- Health Benefits. Medical with HSA and FSA options, dental, and vision
- Prepare for the Future. 401(k) with company match
- Financial Peace University. Take the class, get reimbursed, get a bonus
An Equal Opportunity Employer
Because our team members are trusted to handle sensitive information, we require all candidates that receive and accept employment offers to complete a background check before being hired.
© BambooHR All rights reserved.
© BrightPoint. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
Talent acquisition agency based in Bulgaria and founded by entrepreneurs with over 15 years of experience in investments and management consulting. The team includes experienced and energetic young professionals with achievements proven through the years more than 500 closed positions and over 95% recruitment success rate. Our services include recruitment, talent acquisition and employer branding. In terms of sectors our focus is on experts & management and information & communication technologies.