Information Technology Security Engineer

• Own and continuously strengthen security controls across in-house IT operations and outsourced services, in line with company policies and industry standards
• Champion secure SDLC and secure coding practices for in-house developed applications
• Lead regular vulnerability assessments and penetration tests across IT systems and network infrastructure, and drive timely patching of critical vulnerabilities
• Define and own the Computer Security Incident Response process — including escalation channels, diagnosis, and coordinating remediation with internal and external stakeholders
• Build and maintain dashboards and metrics on cyber threats and vulnerabilities for management reporting
• Govern the secure adoption of AI across the organisation, including LLMs and AI agents
• Act as the go-to security advisor for teams across the business
• Stay ahead of emerging cyber-attack threats and evolving mitigation techniques

Requirements

• Degree in Information Security, Computer Science, IT, or a related field
• 3–5 years' hands-on experience in information security — incident response, security operations, or computer forensics
• Solid knowledge of TCP/IP networking and security products (firewalls, IDPS, web proxies)
• Proficiency with Windows and Linux/UNIX environments
• Working knowledge of core security technologies: AAA, email/web security, PKI, encryption, endpoint protection
• Strong understanding of attack techniques (APT, DDoS, malware, phishing) and corresponding investigation and response methodologies

Nice to Have

• Security certifications such as CISSP, OSCP, GIAC, CEH, CISM, or CISA
• Experience with security frameworks and standards: ISO 27001, C-RAF, COBIT, CIS Critical Controls
• Background in security vendors or law enforcement
• Exposure to AI security governance — e.g. OWASP Top 10 for LLMs, Agent 365, Power Platform, or similar AI risk frameworks
• Experience in IT/security project management, product evaluation, and vendor management