What you will do
- Develop, implement, and maintain security policies, procedures, and security plans.
- Guide development teams throughout the Software Development Lifecycle (SDLC) to ensure secure software development in line with European Commission standards and industry best practices, including OWASP Top 10.
- Conduct security inspections, source code reviews, application security assessments, and risk assessments for internally developed and SaaS applications.
- Monitor IT systems, networks, and applications to detect security breaches, suspicious activities, and potential threats.
- Analyse and respond to security threats and vulnerabilities, managing remediation activities through to closure.
- Design, implement, and maintain security solutions for internal data centre and cloud environments.
- Collaborate with IT and business teams to ensure compliance with security policies, standards, and regulatory requirements.
- Protect sensitive data through encryption, identity management, and access control mechanisms.
- Conduct security awareness sessions and training programmes for employees.
- Develop incident response plans and conduct security simulations and preparedness exercises.
- Perform regular vulnerability assessments and penetration tests using automated tools and manual testing techniques.
- Configure and manage security technologies, including SIEM, EDR, firewalls, and intrusion detection/prevention systems.
- Lead security incident response activities, including containment, eradication, recovery, and post-incident analysis.
- Stay updated on emerging cybersecurity threats, vulnerabilities, technologies, and industry best practices.
What you bring
- Strong knowledge of cybersecurity domains, including network security, application security, endpoint security, and cloud security.
- Experience integrating security into DevSecOps pipelines, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and software supply-chain security.
- Understanding of secure coding practices in Java, Python, and JavaScript, along with common application vulnerabilities such as OWASP Top 10.
- Knowledge of encryption protocols and technologies, including TLS/SSL, IPSec, AES, RSA, and PKI.
- Experience with SIEM platforms such as Splunk, ELK, and Microsoft Sentinel.
- Expertise in vulnerability assessment and penetration testing tools, including Nessus, Qualys, Burp Suite, Metasploit, and OWASP ZAP.
- Knowledge of Identity and Access Management (IAM), Identity Governance and Administration (IGA), MFA, and SSO platforms such as Okta, Microsoft Entra ID (formerly Azure AD), and SailPoint.
- Experience with cloud security architecture, security controls, and monitoring.
- Understanding of GDPR and, where relevant to client engagements, other regulatory and compliance frameworks such as HIPAA and PCI DSS.
- Proficiency in scripting or programming languages for security automation and monitoring.
- Knowledge of ISO/IEC 27001 and ISO/IEC 27005 standards.
- Experience with Endpoint Detection and Response (EDR), Network Security Monitoring (NSM), threat intelligence platforms, and threat modelling methodologies.
How you work
- Analyze complex security challenges and design effective technical solutions.
- Identify potential vulnerabilities and assess security risks proactively.
- Maintain attention to detail in code correctness, error handling, security documentation, and technical implementation.
- Anticipate emerging cyber threats and evaluate evolving security trends.
- Demonstrate strong ethical judgment, integrity, and responsibility when handling sensitive information.
- Continuously learn and adapt to new cybersecurity technologies, threats, and best practices.
- Educate and train development teams and employees on security awareness and secure practices.
- Participate effectively in multilingual meetings and collaborate with international teams.
- Communicate technical security issues clearly to both technical and non-technical stakeholders.
- Work independently as well as collaboratively within cross-functional teams.
- Maintain a results-oriented mindset with a strong focus on security improvements and timely delivery.
What you can expect
- An opportunity to work on enterprise-level cybersecurity initiatives.
- Exposure to application, network, endpoint, and cloud security environments.
- Opportunities to work with modern security tools, DevSecOps practices, and vulnerability management solutions.
- Collaboration with international IT, security, and business teams.
- Opportunities to contribute to security governance, incident response, and continuous security improvement.