toogeza - Security Engineer / DevSecOps
Requirements
• Practical experience in Security Engineering, DevSecOps, or infrastructure/DevOps roles with substantial responsibility for production security. • Ability to own technical tasks from investigation and planning through implementation and validation. • Hands-on SIEM/XDR experience, including log onboarding, queries, detection rules, and alert investigation. • Practical experience with vulnerability management and system or service hardening. • Strong understanding of Linux, Windows Server/Active Directory, networking, authentication, and access controls. Deeper expertise in one environment is welcome, supported by working knowledge of the other. • Understanding of cloud, container, API, and CI/CD security, including secrets management. • Ability to review code, Infrastructure as Code, and configurations, and propose actionable improvements. • Scripting and automation skills using Python, PowerShell and/or Bash, APIs, and Git. • Practical use of AI tools for engineering tasks, with a disciplined approach to checking their output. • Ability to validate security weaknesses, explain their impact, and work constructively with technical teams on remediation. • English proficiency sufficient for technical documentation and vendor support. • You should be comfortable translating security policies, risk decisions, and agreed requirements into configurations, technical checklists, and acceptance criteria. • This includes documenting control gaps, remediation plans, and compensating measures; providing evidence that controls have been implemented and tested; and escalating unresolved risks or exceptions through the agreed process. • The CISO sets security direction and priorities and coordinates risk decisions with accountable stakeholders. Your role is to provide technical analysis, implementation, and verification. • Experience with Cortex XDR, Microsoft Sentinel, or Wazuh; familiarity with XQL or KQL. • AWS or Azure security, Terraform, Ansible, and GitLab CI/CD. • Palo Alto, Google Workspace, Microsoft 365/Entra ID, or privileged access management solutions. • Experience implementing or testing AI agents, retrieval-augmented generation (RAG), or corporate LLM services. • Penetration testing, red teaming, adversary emulation, or purple teaming experience. • Experience providing technical evidence for audits or implementing controls within an ISMS/ISO 27001 programme. • Experience building practical security processes in a small team.
Responsibilities
• Security monitoring and detection • Develop and implement a security monitoring roadmap, including requirements, architecture, and integration priorities. • Contribute to the selection and evolution of our SIEM/XDR architecture. • Integrate log sources and maintain reliable, complete, and useful security telemetry. • Develop and test detection rules, correlation logic, and threat-hunting queries. • Support incident investigation and improve response procedures. • Vulnerability management • Implement a repeatable process for vulnerability discovery, validation, prioritisation, remediation tracking, and retesting. • Assess exploitability and business impact, considering exposure, asset criticality, and potential attack paths. • Develop remediation plans with IT and DevOps, track progress, and verify that fixes are effective. • Secure service delivery and hardening • Review the security of service architectures, configurations, integrations, and CI/CD pipelines. • Develop technical checklists covering access controls, role models, credentials and secrets, network connectivity, external integrations, encryption, and logging. • Implement and automate secure configuration baselines. • Work with DevOps to assess security readiness before production launches and address identified risks. • Plan and validate security changes with attention to service availability and rollback options. • Security automation and AI-assisted engineering • Build scripts and integrations for event analysis, configuration checks, vulnerability management, and reporting. • Use AI coding assistants and agent tools to support engineering tasks. • Validate generated code and findings, and protect credentials, access permissions, and corporate data throughout these workflows. • AI security and governance implementation • Develop and apply security assessment checklists for corporate LLM services, AI assistants, agents, and their integrations. • Assess access to data and tools, execution isolation, and scenarios that could adversely affect information or systems. • Address risks such as prompt injection, data leakage, excessive permissions, and authorisation failures. • Translate agreed AI governance requirements into technical controls and verification steps. • Security validation • Conduct authorised tests of attack scenarios and vulnerability exploitability. • Verify whether monitoring and protection tools detect or prevent the tested activity. • Use findings to improve configurations, detection coverage, and response procedures. • You will partner with experienced DevOps and IT engineers, explain security issues with clear technical evidence, and help develop workable solutions. Priorities will be agreed with the CISO, with delivery sequenced according to risk and team capacity. • We value demonstrated hands-on contribution and the ability to deliver verified improvements. Experience with every technology listed above is not required.
Benefits
• Make a real impact on security. Take ownership of key security engineering initiatives, help shape security practices, and see the direct results of your work across the company’s infrastructure and digital services.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT