Senior Security Engineer

Position Purpose :

The Senior Security Engineer - Platforms, Digital Workplace & AI Enablement sits within IDP's Security Platforms and Engineering team and provides senior, hands-on engineering capability across security platforms, Digital Workplace security, vulnerability management, patching governance, reporting, automation, penetration testing, AI enablement and security engineering practices.

What we're looking for :

- Significant hands-on experience as a senior security engineer across security platforms, infrastructure, endpoint, cloud or modern workplace security.

- Practical experience with vulnerability management, patching governance, remediation tracking, reporting and security compliance uplift.

- Experience with SIEM/SOAR, detection engineering, dashboards, alerting and automation, preferably Splunk.

- Understanding of DLP, CASB, SaaS security, EDR, secure configuration baselines and access governance.

- Proven ability to engage with business stakeholders and translate requirements into practical secure solutions.

- Proven ability to design both tactical short-term fixes and strategic long-term solutions.

- Demonstrated experience supporting penetration testing programmes and remediation governance.

- Strong documentation capability including runbooks, SOPs, service boundaries and operational reporting.

- Self-managed, proactive and comfortable working with ambiguity; strong sense of ownership and accountability.

- Quick learner with the ability to pick up new platforms and processes rapidly across a broad tool set.

- Working knowledge of how AI works, with active interest in building AI agents and applying AI to security and workplace use cases.

Tech Stack :

Microsoft Defender, Intune, Purview, Defender for Office 365, SharePoint, OneDrive, Exchange Online, Netskope, Splunk, Ivanti Neurons.

Additional Requirements :

- Strong experience in Security Engineering and Cybersecurity, including designing and implementing security solutions across complex environments.

- Proficiency in Application Security, such as secure SDLC practices, code review, threat modeling, and vulnerability remediation for web and mobile applications.

- Expertise in Network Security, including firewalls, VPNs, intrusion detection/prevention systems, network segmentation, and secure configuration management.

- Solid background in Information Security, including risk management, security policies and standards, awareness programs, and alignment with industry frameworks (e.g., ISO 27001, NIST).

- Experience with security monitoring and incident response using SIEM tools, endpoint protection platforms, and cloud security services (e.g., AWS, Azure, or similar).

- Relevant certifications such as CISSP, CISM, CEH, OSCP, or equivalent are highly beneficial.

- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.

- Ability to work collaboratively in cross-functional teams, communicate clearly with technical and non-technical stakeholders, and mentor less experienced team members.