Security Engineer

About the role

The Security Engineer is responsible for the administration, operation, maintenance, troubleshooting, and continuous improvement of enterprise security technologies across vulnerability and configuration management, cloud security, identity and access management, network access control, and secure remote access. The role requires strong cybersecurity fundamentals and demonstrable hands-on experience with Tenable, Microsoft Defender for Cloud, enterprise VPN technologies, Okta, Zero Trust Network Access (ZTNA), and Aruba ClearPass. The engineer will work closely with Security Operations, Network, Infrastructure, Cloud, Identity, and Application teams to maintain effective security controls and drive technical issues and security findings through remediation and closure.

Key responsibilities

• Administer and operate Tenable for vulnerability, compliance, configuration, and security hardening assessments, including configuring and executing authenticated and unauthenticated scans across in-scope infrastructure.
• Assess systems against approved security baselines, including CIS Benchmarks and vendor-recommended hardening standards.
• Analyse and validate vulnerabilities and configuration findings, determine remediation requirements, and coordinate corrective actions with technology owners.
• Administer and monitor Microsoft Defender for Cloud across in-scope cloud resources and workloads, reviewing and managing Secure Score, security recommendations, and cloud security posture findings.
• Identify cloud security misconfigurations, vulnerabilities, and control gaps and coordinate remediation with Cloud and Infrastructure teams.
• Support the operation of enterprise VPN and ZTNA solutions, assisting with secure remote-access and identity-based access policies.
• Support Okta-based identity and access management services, assisting with SSO, MFA, authentication policies, and application integrations.
• Support Aruba ClearPass Network Access Control (NAC) operations, assisting with authentication, authorisation, device profiling, and network-access policy activities.
• Monitor the health, availability, coverage, and effectiveness of supported security technologies and investigate security issues.
• Maintain technical documentation, configuration records, operational procedures, and prepare operational reports covering security posture, vulnerabilities, and remediation status.

About you

• 2-3 years of relevant hands-on experience in cybersecurity engineering, security operations, network security, cloud security, identity and access management, or related security engineering roles.
• Demonstrated experience supporting security technologies in medium to large enterprise environments.
• Ability to independently administer, configure, troubleshoot, and support enterprise security technologies.
• Experience working across Security, Network, Infrastructure, Cloud, Identity, and Application teams.
• Practical, hands-on experience with Tenable – vulnerability scanning, authenticated scanning, compliance/configuration assessment, security hardening, finding analysis, remediation validation, and scan troubleshooting.
• Practical, hands-on experience with Microsoft Defender for Cloud – Cloud Security Posture Management (CSPM), Secure Score, security recommendations, workload protection, alerts, security policies, and remediation.
• Strong problem-solving skills with the ability to investigate technical issues and drive them through resolution.
• Strong cybersecurity fundamentals and technical troubleshooting capability.
• Ability to analyse security findings and determine appropriate remediation actions.
• Clear written and verbal communication, including the ability to explain technical risks and recommendations.