The energy industry is undergoing the largest transformation since industrialisation at an unprecedented rate of change and we are positioning ourselves to be at the heart of that change.
Our aim is to be the leading global provider of solutions that enable customers to release £30bn of value per annum from distributed energy resources (DERs). We are building a Software as a Service (SaaS) subscription business with a global addressable market of £2.4 billion per annum, by digitally connecting hundreds of thousands of DERs with energy markets.
We are seeking a Senior Cloud Security Engineer who is skilled in security architecture, deployment, and management. This is a hands-on, creative, and collaborative position that is a full-time member of an AWS-focused, agile platform engineering team. The position will work closely with our delivery and integrations teams to improve the overall security, quality and scalability of our product build, deployment and monitoring.
What you'll do
* Drive technical decisions to develop platform and security engineering roadmap
* Help develop and implement the technical security strategy for the organisation
* Act as a technical security expert within the business, providing advice and guidance to other team members and the wider business
* Help cultivate a strong technical security culture across the organisation
* Lead the development of robust and secure CI/CD pipelines
* Lead the development of security tooling
* Plan and implement solutions for backup and recovery, high availability, key management, and other strategic initiatives
* Setup and maintain monitoring, metrics & reporting systems for fine-grained security observability and actionable alerting
* Collaborate with external pen-testing company to help evaluate the security for all aspects of our cloud infrastructure, self-hosted infrastructure and other hardware
* Work with our delivery teams to ensure our services adhere to the AWS Well-Architected Framework (Operational Excellence, Security, Reliability, Performance Efficiency, Cost Optimisation and Sustainability)
What you'll need
* A strong technical security background
* Demonstrated experience in communicating and influencing key stakeholders including business leaders, engineers and customers
* Multiple years of experience working with cloud technologies, preferably with a security focus. We work with AWS, but we understand the skills are transferable
* Strong experience in implementing and automating security best-practices
* Proficient with DevOps methodologies such as CI/CD, version control (we use GitHub) and full-stack repeatability
* Experience working with teams around the globe
* Knowledge of incident response planning, security event management, tooling and detection
* Ability to prioritise tasks and work independently
* Experience working with infrastructure as code tools such as CloudFormation, Terraform and CDK.
It would be great if you had
* Foundational networking knowledge, such as switching, firewalls, routing and DNS
* AWS networking knowledge, such as VPCs, Transit Gateways and how this works in a multi-region environment
* Experience with AWS SecurityHub, GuardDuty, Config, Inspector, CloudTrail and other AWS Security services
* Software development experience in either Typescript or Python
* Experience applying security risk assessment methodologies
Ideally you will be based in the Greater Manchester and happy to come into the office a couple of days per week! But we appreciate that things have changed and flexibility is at the top of everyone's agenda, so if you would rather be remote please let us know.
If this sounds like you then we'd love to hear from you.
Studies have shown that some groups of people, like women, are less likely to apply to a role unless they meet 100% of the job requirements. Whoever you are, if you like one of our jobs, we encourage you to apply as you might just be the candidate we hire.
#J-18808-Ljbffr