Security Engineer

Meet the Team

Develops and executes software and operational security controls, defences, and countermeasures to intercept and prevent security risks. Performs security assessments that may include vulnerability and risk assessments, threat analysis, and security code reviews to identify potential design and implementation vulnerabilities.

Researches and evaluates cybersecurity threats and performs root cause analysis, which may involve implementation and deployment of third-party software. Provides security software engineering recommendations and resolves integration and testing issues with Cisco BUs.

Determines and implements appropriate security hardening, including for software, infrastructure, and build environments. Builds a standardised set of security requirements and produces metrics to report performance against those requirements. Detects and mitigates security risks, and leads or participates in security architecture and design review meetings.

Your Impact The Senior Security Engineer will help build and operate security observability capabilities across SaaS applications, homegrown applications, and cloud environments, and endpoints. This role converts security requirements into scalable monitoring, identifies configuration drift and control failures, integrates telemetry from multiple security platforms, and automates remediation workflows. The engineer will work independently on complex initiatives and provide technical guidance to other team members while supporting the technical leads.

Key Responsibilities · Design, automate and implement continuous security monitoring for SaaS, homegrown applications, cloud and endpoints. · Translate security requirements into measurable configuration baselines and monitoring controls. · Strong AI understanding: how to use AI and create agents to help automate processes and tasks ·Understand security architecture and where risks are presented in a security review · Build and maintain integrations across tools like Axonius, Wiz, Splunk, ServiceNow, Jira, Tines, identity, endpoint, code, and CI/CD systems. · Determine which telemetry can be centralised in our tools and design solutions for remaining coverage gaps. · Develop dashboards that provide application owners with a consolidated view of configuration drift, vulnerabilities, control failures, identity risks, logging gaps, and open remediation items. · Create and tune monitoring rules to improve detection accuracy and reduce false positives. · Automate ticket creation, risk routing, escalation, remediation validation, and ticket closure. · Lead onboarding of critical and high-risk applications into the monitoring programme. · Partner with application owners to remediate findings and validate that risks have been resolved. · Support remediation campaigns and measure risk reduction across participating applications. · Escalate critical, high-risk, or overdue findings according to established security standards. · Partner with AI security teams, consulting teams, ID&R, identity, cloud security, software security, privacy, and other specialist teams. · Document architectures, data flows, monitoring coverage, control logic, operational procedures, and technical decisions. · Mentor less-experienced engineers and serve as a technical backup to the Observability Technical Lead.