Security Engineer - Senior

Qualifications

• Experience in the design or implementation of security controls within a formal security management framework (e.g. ISO 27000, NIST SP-800 series, or other national equivalents)
• Advanced knowledge of security systems including one or more of these domains: anti-virus applications, content filtering, firewalls, authentication systems, vulnerability management solutions, IDS/IPS, DLP, SIEM platforms
• Experience in supervision of technical teams or managing security projects
• Experience of preparing technical documentation and Standard Operating Procedures
• A minimum requirement of a Bachelor’s degree at a nationally recognised/certified university in a related discipline (Computer Engineering, Computer Science, …) and 3 to 5 years post‑related experience (junior/senior)
• Experience with NATO or national Security Accreditation process
• Security management certifications (e.g. CISSP, CRISC, CISM, or equivalent)
• Technical certifications relevant to the post (e.g. GIAC, CCNP‑Security, CompTIA Security+, or equivalent)
• Advanced knowledge of web application security including OWASP Top 10, secure SDLC, authentication/authorization mechanisms, API security, and web application security
• Experience implementing security controls in Databricks environments on Microsoft Azure including Unity Catalog, workspace security, cluster policies, secret scopes, network isolation (VNet injection, private endpoints), and secure data access patterns
• Experience conducting web application penetration testing and security assessments
• Experience with container security and orchestration platforms
• Experience with design, implementation and management of networks based on Cisco technologies
• Experience with configuration and management of network monitoring and event management systems (e.g. Splunk or Solarwinds)
• Experience with security incident management
• Experience with NATO security policies
• Experience with security risk management

Desirable

• Master’s Degree, at a nationally recognized/accredited university in a related discipline (Computer Engineering, Computer Science, …)
• Experience with NATO or national Security Accreditation process
• Security management certifications (e.g. CISSP, CRISC, CISM, or equivalent)
• Technical certifications relevant to the post (e.g. GIAC, CCNP‑Security, CompTIA Security+, or equivalent)
• Advanced knowledge of web application security including OWASP Top 10, secure SDLC, authentication/authorization mechanisms, API security, and web application security
• Experience implementing security controls in Databricks environments on Microsoft Azure including Unity Catalog, workspace security, cluster policies, secret scopes, network isolation (VNet injection, private endpoints), and secure data access patterns
• Experience conducting web application penetration testing and security assessments
• Experience with container security and orchestration platforms
• Experience with design, implementation and management of networks based on Cisco technologies
• Experience with configuration and management of network monitoring and event management systems (e.g. Splunk or Solarwinds)
• Experience with security incident management
• Experience with NATO security policies
• Experience with security risk management

Responsibilities

• Providing professional contributions to assist in achieving and maintaining security accreditation for CMRE systems and applications, data acquisition, processing and storage, and their interfacing with other CIS, across the life cycle (development, implementation, operation, enhancement, withdrawal from service)
• Advising, within a project structure, on cost‑effective countermeasures to minimize the security risks anticipated during the development and operation phases of the CIS life cycle
• Implementing and operating, within a framework of security accreditation, the prescribed security controls under the supervision of the CIS Provider and under the control of Security Staff
• Documenting the architecture, configuration, and security posture of CIS in use within CMRE to inform the risk management activities of the Security Organization
• Implementing security best practices and security controls under the supervision of the CIS Provider
• Planning, implementing, and upgrading CIS
• Analysing security breaches to determine their root cause
• Contributing to the definition, implementation, and maintenance of corporate security policies
• Supervising and managing Technical Teams as required
• Undertaking security testing in accordance with an agreed Security Testing & Verification (ST&V) Plan
• Supporting the CIS Provider in the formulation of Security Operating Procedures (SecOPs) for the CIS
• Contributing to the maintenance of configuration baselines through configuration management and change control
• Supporting the CIS Provider in undertaking periodic vulnerability assessments under the control of Security Staff and in accordance with the requirements of the Security Accreditation Authority
• Providing regular training and awareness to other project staff
• Supporting periodic security audits performed by Security Staff and the Security Accreditation Authority

Location

Off‑site

Security Clearance

Not required