Security Engineer
7 days ago
Lee-on-the-Solent
This role covers both: • Day 1 Security (Build / Project Implementation), • Day 2 Security (Operations / Production Support), • The Security Engineer will work closely with Security Leads, Infra, System, and Software teams to ensure compliance with government security policies and standards., • Security Implementation & Engineering, • Implement security architecture and controls as designed by Security Leads/Architects, • Support system, application, and infrastructure security configurations, • Assist in threat modelling and risk assessment activities, • Translate security requirements into technical implementation across platforms, • Compliance Support, • Support compliance with:, • IM8 / Government security policies, • Whole‑of‑Government (WOG) security requirements, • PDPA (where applicable), • Assist in preparation and documentation for:, • Security Risk Assessments (SRA), • Vulnerability Assessments (VA), • Penetration Testing (PT), • Maintain security documentation and evidence for audits, • DevSecOps & Secure Development, • Implement and maintain security tools in CI/CD pipelines:, • SAST, • DAST, • SCA, • container scanning, • Monitor and triage findings, and work with developers on remediation, • Support secure coding practices and DevSecOps adoption, • Assist in API security, secrets management, and secure communications setup, • Security Testing Support, • Support coordination and execution of VA/PT activities, • Track vulnerabilities and ensure timely remediation, • Assist in documenting findings and closure evidence, • Support system security certification and go-live requirements, • System & Platform Hardening, • Implement and maintain security hardening for:, • Operating systems, • Middleware and databases, • Kubernetes and containers (RBAC, secrets, network policies), • Support configuration of:, • API Gateways, • WAF, • Authentication and authorization mechanisms (OAuth2, mTLS), • Incident Response, • Support investigation, containment, and remediation of security incidents, • Perform log analysis and assist in root cause analysis (RCA), • Work with SOC and internal teams during incidents, • Follow and improve incident response playbooks, • Vulnerability & Patch Management, • Perform regular vulnerability scans and monitoring, • Track and verify patching and remediation activities, • Escalate high-risk vulnerabilities and propose mitigation controls, • Security Monitoring, • Monitor alerts from SIEM and security tools, • Assist in tuning detection rules and dashboards, • Ensure logging and monitoring coverage across systems, • Audit & Compliance Support, • Support audit preparation, evidence collection, and remediation tracking, • Maintain security records and documentation, • Assist in reporting security posture and issues, • Access Control Administration, • Support implementation of:, • RBAC, • MFA, • Privileged Access Management (PAM), • Perform user access reviews and ensure least privilege. Regret to inform that only shortlisted candidates will be notified. CEI: R1988671. EA License: 14C7275 #J-18808-Ljbffr