Overview
We are looking for a skilled Security Engineer to join our team in a fully remote capacity. The role focuses on vulnerability management, identity and privileged access management, and other security operations, providing an opportunity to enhance an organization’s security posture through hands-on technical work and collaboration with various teams.
Responsibilities
- Improve vulnerability scanning coverage and reliability across infrastructure and cloud environments.
- Analyse vulnerability findings to reduce false positives and prioritise remediation based on risk.
- Collaborate with infrastructure and engineering teams to track and resolve vulnerabilities.
- Support day-to-day privileged access management and identity access management operations, including access requests and user lifecycle management.
- Address technical debt and legacy security issues, managing outstanding remediation backlogs.
- Monitor security outputs from EDR and Microsoft 365 security tools for insights.
- Create and maintain operational documentation, procedures, and runbooks.
Requirements
- Strong hands-on experience in vulnerability management using Qualys and/or Rapid7.
- Practical knowledge of CyberArk or similar privileged access management solutions.
- Good understanding of vulnerability scanning, risk prioritisation, and remediation processes.
- Working knowledge of EDR solutions and Microsoft 365 security frameworks.
- Experience in resolving security hygiene issues and managing operational backlogs.
- Ability to work independently with minimal supervision and deliver technical improvements.
- Strong communication skills with experience in collaborating with technical teams.