The Security Engineer role focuses on the design of business-driven Information Technology solutions to meet security requirements related to function, protection, assurance,risk management and compliance. The scope of work includes:
(1) the collection and validation of requirements,
(2) the identification of risks, threats, vulnerabilities, potential anomalous flows and interactions,
(3) the definition of the security processes for assurance, management and compliance,
(4) the definition of security subsystems, and
(5) the design of integration and deployment architectures for security in Networks, Infrastructure, Middleware, Applications and Systems & Service Management systems. Depending on the area of work, the Security Architect may perform evaluation and selection of the components, design of hardware, software, process and service components of the solution, assurance of deployment architectures, and guide secure engineering practices in development.

 

Required Technical and Professional Expertise

• 10 years of relevant industry experience
• Extensive experience in information security and/or IT risk management with a focus on security, performance and reliability
• Solid understanding of security protocols, cryptography, authentication, authorisation and security
• Good working knowledge of current IT risks and experience implementing security solutions
• Experience implementing multi-factor authentication, single sign-on, identity management or related technologies
• Ability to interact with a broad cross-section of personnel to explain and enforce security measures
• Excellent written and verbal communication skills as well as business acumen and a commercial outlook
• Full stack development experience with Java backend
• Understanding of one or more databases (DB2/Oracle)
• Good understanding of SQL

Preferred Technical and Professional Expertise

• Knowledge of Java application frameworks,
• Web application development and technologies (UI toolkits/HTML/CSS)
• Understanding of web security (CSS/SQL injection/