SecOps Engineer
Encompass Corporation, United Kingdom
Job Description
Encompass is the creator of Know Your Customer (KYC) automation software, utilizing robotic search to discover everything a KYC policy demands.
With offices in Sydney, Glasgow, London, Singapore and Belgrade we are a rapidly growing international company. We are fortunate to have some of the industry’s leading professionals amongst us and a group of bright and committed teammates.
About the Role
Due to our continued success and high demand from our clients, we are looking for a SecOps Engineer to join our Information Security team protecting Encompass against information security and cyber security threats such as malware, phishing, ransomware and other targeted attacks.
You will bridge the gap between the DevOps Team and Security Team. In your day to day role you will work closely with teams that deal with cloud infrastructure and CI/CD automation, while you align and prioritise your work together with the security department to serve the security and auditability needs of the company. Your main role in this job is to identify, propose, implement, and maintain security solutions for our production IT landscape.
Responsibilities amp; Duties
- Input into the design and configuration of security principles within existing and/or new environments.
- Reviewing and improving upon current security measures within any of the specialisations in the team
- Creating and improving on proactive monitoring relevant to security of the environments and/or specific applications
- Improving security in working methods that the department uses (e.g. auditable methods of working, concealing secrets in infra-as-code codebase)
- Reviewing and improving security policies in e.g. AWS IAM, MS Active Directory
- Ensuring auditability of changes
- Investigation and remediation of security incidents
- Organising automated security audits
- Recommending, designing and deploying new security tooling
Requirements
- Strong understanding of security concepts and practice a strong drive to automate all the things
- Strong Infrastructure, Networking and Cloud background
- Experience with infra-as-a-code (e.g. puppet, ansible, terraform)
- Able to proactively review, assess, understand, and report on vulnerabilities or security detections in a business context and propose proportionate and effective solutions
- An understanding of key attacker techniques and capabilities, and models such as Mitre ATTamp;CK and the various Cyber Kill Chain frameworks
- Knowledge of key technologies such as Amazon Web Services, Azure Active Directory, Microsoft Windows, Linux, Kubernetes, MFA, SSO, Zero Trust, PAM.
- Identity and Access Management (IAM), Privileged Identity Management (PIM) and Secrets Management experience is a bonus
- Experience with some combination of SIEM, Vulnerability Management, Endpoint Protection and Response (EDR), Data Loss Prevention (DLP), Cloud Security Posture Management (CSPM), Web Application Firewalls (WAF)
- Knowledge of the various Information Security Engineering/SecOps requirements within an ISO/IEC 27001 Framework
- Basic experience in some scripting languages (Python, PowerShell etc.)
- Any industry specific security certification is a bonus
Benefits
We offer a rewarding and challenging place to work, a transparent and collaborative culture and as we grow as a business our benefits package will grow with us. Below are some of what we currently offer:
- Staff pension plan
- Company wide bonus
- Participation in our share options scheme
- Adult approach to flexible working/remote working (post Covid)
- Full access to Udemy for online training
- Allocated Lamp;D budget for employees
- Paid Volunteering Leave programme