Security Engineer

Job Title: Security Engineer

Location: Basingstoke (BSN01)

DNS OPS FUNC DIG

Orange

Role Must Have:

~ Where a Pen Tester would typically be brought in to assess the security of a finished solution, This role is an application developer embedded within the Agile development teams to ensure that security is designed in from the outset.

~ The successful application will have a passion for Security, and will keep abreast of the latest developments in the field of Information Security, in areas such as PKI, zero-day vulnerabilities, wider market trends in security

~ Knowledge of, and the ability to teach safe coding practices.

~ Experience in the execution of security and vulnerability assessment tools such as Nessus

~ Strong communication skills to be able to articulate the security considerations of an application to the Development team and work with the team to find more secure ways of delivering application functionality.

~ In addition to the points above, the candidate will themselves be responsible for the delivery of key security enforcing capability into the platform.

~ The successful candidate will work as part of a multi skilled agile team, where teamwork is paramount. The role will be challenging and varied, where cross training is expected and challenges shared.

~ Where appropriate the successful candidate will have the responsibility of owning the delivery of a work package from design, through prototyping, ensuring the work package meets functional and non-functional requirements. The skills necessary to troubleshoot and problem solve. The candidate will script repeatable unit tests to exercise functionality, which will account for desired and undesired outcomes.

~ Where applicable the candidate will continue to support the work package through user piloting and into production, and will continue to be on hand to provide early life support, as well as creating and maintaining support and design documentation to assist users and support personnel in maintaining the work package throughout its life.

~ The candidate will be responsible for the delivery of ongoing change to the work package, continually reassessing application security in response to ever evolving user requirements.

~ Candidates must possess strong knowledge of Microsoft Windows systems administration within an enterprise environment - delivery of configuration change via GPO, Registry, Filesystem, Powershell cmdlets or, WMI, as well as Windows Update and patching mechanisms, including Windows Installer.

~ UK national with **** ****, with experience in working in high security environments

~ Location M4 corridor 5 days a week Desirable - Experience across technologies such as:

~ Experience in the development and delivery of software using Agile Methodologies

~ Active Directory, PKI, VMWare virtualisation, Windows Server 2019 and the creation of gold builds, System hardening (GPOs etc.), Nexus configuration repositories,

~ PowerShell and Python for scripting, automation or test creation,

~ Configuration and automation using Ansible, Terraform.

~ Automated test execution using Robot framework Orange