Main Purpose:

This position involves driving improvements for a vital business enabler, necessitating collaboration with developers and
DevOps teams. We're looking for self-starters who are highly motivated to make a positive impact on the global organization by finding solutions to security problems without letting security becoming a blocker.

Knowledge Skills and Abilities, Key Responsibilities:

This is a highly technical role, hands-on, code driven. It is not suitable for people who are primarily operational risk / audit focused, or anyone who can’t code.

Following items are ‘must have’ at a deeply specialist level:

• Core IT security principles
• Securing AWS environments
• Ability to code
• Automating security processes and systems
• Code security - must have knowledge and experience of source code reviews.

Following items are ‘must have’ at a good level of competence:

• Code repositories / management
• AWS
• ECR
• ECS
• Networking
• Users’ management
• Secrets Manager
• CI/CD pipelines
• Python
• Ansible
• CDK
• Lean and understand new technologies.

Following items are acceptable at a basic level of competence:

• Basic cryptography experience.
• Java
• Gitlabs
• Azure

Key Responsibilities

• Responsible for securing our AWS environments, you'll take charge of day-to-day security work while planning and implementing long-term strategies.
• Collaborating closely with DevOps teams, on ensuring the security of new systems from the start.
• You will work to seamlessly integrate security into both existing and new DevOps pipelines to drive enhancing the security of code produced by various teams and projects. You will guide and educate developers on how fix critical security problems in their code.

Key Relationships and Department Overview:

• CISO, Security Engineering Leads, Head of Infrastructure, Lead Developers, Devops teams

This role reports to the Head of Security Engineering.