Description
We are seeking a passionate Security Specialist with hands-on experience in working with all aspects of Azure, M365, and preferably Google Cloud Platforms (GCP). Aside from infrastructure, the candidate should have experience and working knowledge of SIEM and vulnerability management platforms. The role will cover elements of cyber incident response, so a background in supporting a wider incident response function is a necessity.
Cloud Security Assessment & Advisory:
- Assess the security configurations of Azure IaaS and Google Cloud environments, including infrastructure.
- Provide recommendations based on industry best practices and emerging security threats.
- The ability to provide Cyber Incident Responders subject matter expertise in Cloud security when required.
Defender & Security Monitoring Advisory:
- Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud.
- Offer guidance on improving threat detection, monitoring, and response for cloud-based resources.
Access Control & Conditional Access:
- Assess and improve Conditional Access policies and identity management strategies, enforcing zero trust and least privilege principles.
- Provide expert advice on configuring and managing identity and access management (IAM) solutions for secure cloud environments.
Compliance & Governance:
- Ensure cloud environments meet regulatory and internal governance requirements.
- Conduct periodic security audits and risk assessments, offering actionable recommendations.
Security tooling engineering and maintenance:
- Day to day maintenance of various security tools including SIEM and vulnerability scanning toolsets.
- Manage upgrades, configuration changes and feature enhancements.
Support the Cyber Incident Response team
- Provide support on all types of cyber incident response as part of the wider cyber response function.
- Use tooling such as SIEM, EDR, IdP
Key Requirements
- Experience in an IT engineering capacity.
- Hands-on experience administering Azure security environments.
- Strong experience managing compute, network, and storage resources across cloud and hybrid environments.
- Extensive knowledge of Azure services, Microsoft Defender, Conditional Access, and Google Cloud security tools.
- Strong understanding of SIEM platforms, vulnerability management tools, and supporting infrastructure.
- Broad knowledge of core IT domains, including infrastructure, software development, databases, cloud platforms, and identity and access management (IAM).
- Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux.
- Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications.
- Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes.
- Proficiency in Terraform and infrastructure-as-code (IaC) best practices.
- Excellent written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.