Description
Polestar is accelerating the transition to sustainable mobility through electric performance. As a digital-first, cloud-driven organisation, cybersecurity is a critical enabler of our business, products, and services.
We are looking for a Cybersecurity Engineer to strengthen and evolve our enterprise security capabilities. This role focuses on designing, implementing, operating, and continuously improving security controls that protect our workforce, data, identities, devices, networks, and digital services.
Responsibilities
You will work across security engineering, automation, and operational resilience, partnering with teams throughout the organisation to embed security by design and continuously improve enterprise security capabilities.
- Implementing and continuously improving security capabilities across endpoint, identity, network, collaboration, and data protection domains.
- Supporting the deployment, optimisation, and governance of enterprise security platforms and controls.
- Building and maintaining security automations that reduce manual effort and improve operational effectiveness.
- Improving detection, response, and resilience capabilities across the enterprise environment.
- Partnering with infrastructure, workplace, cloud, networking, and engineering teams to embed security by design.
- Driving the implementation of Zero Trust principles, including strong identity controls, least privilege, continuous verification, and network segmentation.
- Supporting the secure adoption of AI technologies and helping establish technical guardrails that reduce risk while enabling innovation.
- Improving data protection and information security capabilities to ensure sensitive information is protected throughout its lifecycle.
- Contributing to security architecture decisions and helping define future security capabilities and standards.
- Evaluating new technologies and continuously improving security tooling, integrations, and processes.
- Serving as a Tier 3 security engineering escalation point for complex incidents and high-priority security events.
- Participating in a shared on-call rotation supporting our Security Operations Centre (SOC) for approximately five weeks annually.
Requirements
- At least 5 years of hands-on experience in cybersecurity engineering.
- Strong technical understanding of enterprise security architectures and controls.
- Experience implementing security solutions across endpoint, identity, network, and data protection domains.
- Experience building automations, integrations, or custom tooling to improve security operations and engineering outcomes.
- Strong scripting and problem-solving skills.
- Experience working in cloud-first and modern enterprise environments.
- Ability to collaborate effectively with both technical and non-technical stakeholders.
- A passion for continuous improvement and a builder’s mindset.
Nice to Have
- Experience with Microsoft security technologies.
- Data protection, data security, privacy, and DLP.
- Endpoint security and device management.
- Network security and Zero Trust architectures.
- Email and collaboration security.
- Security automation, orchestration, and scripting.
- Infrastructure-as-Code (IaC) and secure configuration management.
- Identity, access, and privilege management.
- Public Key Infrastructure (PKI) and cryptographic controls.
- AI security, governance, and risk management.