Job Description

Your role.
Your team
You will be part of a multi-disciplinary technology team, and work closely with our customers (business,software vendors and partners). Within the team, you will be responsible on solution engineering for a suite of Cybersecurity processes and will participate in all aspects from design through to testing and implementation.

About the role
As Cybersecurity Engineer, you will have primary responsibility on solution engineering/maintenance of Cybersecurity Operations related matters, e.g., vulnerability remediation, identity & access management, etc.
You will also be providing Cybersecurity Operationstechnical expertise to support yourteam to deliverservices and changes.

Your duties & responsibilities
The key focus areas of this role are:
Triage and undertake root-cause analysis of security incidents and issues.
Provide support for ongoing security related matters such as vulnerability detection, investigation and remediation, certificate and key management, penetration testing validation, firewall traffic analysis and adjustment, access control review, software risk assessment, identity management, etc.
Analyse new security requirements and build appropriate security control solutions across applications and platforms.
Contribute to the design and implementation of the end-to-end Cybersecurity Operations practices and procedures - ensuring good governance, efficient handling & processing, in line with best practices and timely delivery of accurate and trusted security solutions.
Contribute to the improvement, documentation and communication of Cybersecurity Operations solutions and processes.
Contribute towards evangelising Cyber Security Operations practices across Group Technology Operations and the Cyber Security discipline.
Collaborate with Cybersecurity Operations Lead and team members to develop solutions that are fit for purpose and align to the enterprise security strategy.
Ensure compliance with the Group Cyber Security Framework, Incident Response Plans, Policies and Standards.
Work collaboratively with various internal and external stakeholders, which include Cybersecurity Assurance, Group Risk, Program & Portfolio, Product Delivery Tribes, Software Vendors, etc, to implement and to deploy changes.
Promote a collaborative team environment that fosters creativity, innovation, and knowledge capture/sharing.
Staying up to date with new and emerging security threats, then recommending or putting in place protective or mitigation controls.
Leverage and improve existing toolsets and using AI/Automation as a foundation.

Hollard