Security Engineer

Job Description:

VULNERABILITY MANAGEMENT & SECURITY HARDENING – TENABLE

* Administer and operate Tenable for vulnerability, compliance, configuration, and security hardening assessments.
* Configure and execute authenticated and unauthenticated scans across in-scope infrastructure.
* Assess systems against approved security baselines, including CIS Benchmarks and vendor-recommended hardening standards.
* Analyse and validate vulnerabilities and configuration findings, determine remediation requirements, and coordinate corrective actions with technology owners.
* Perform rescans and validation to confirm remediation and closure of findings.
* Troubleshoot scan coverage, credential, authentication, plugin, and related operational issues.
* Support vulnerability and hardening reporting, remediation tracking, risk acceptance, and exception processes.

CLOUD SECURITY – MICROSOFT DEFENDER FOR CLOUD

* Administer and monitor Microsoft Defender for Cloud across in-scope cloud resources and workloads.
* Review and manage Secure Score, security recommendations, cloud security posture findings, regulatory compliance views, and security alerts.
* Identify cloud security misconfigurations, vulnerabilities, and control gaps and coordinate remediation with Cloud and Infrastructure teams.
* Support configuration and optimisation of Defender for Cloud plans, policies, workload protection, and security posture capabilities.
* Investigate relevant cloud security alerts and support remediation and incident response activities.
* Maintain visibility of security coverage and track cloud security findings through closure.

SECURE REMOTE ACCESS – VPN & ZTNA

* Support the operation of enterprise VPN and ZTNA solutions.
* Assist with secure remote-access and identity-based access policies.
* Support investigation and troubleshooting of connectivity, authentication, authorisation, certificate, and application-access issues.
* Work with Network, Identity, Endpoint, and other technical teams to resolve secure-access issues.
* Support access reviews, configuration changes, upgrades, and continuous improvement activities.
* Apply Zero Trust and least-privilege principles when supporting remote-access requirements..

IDENTITY & ACCESS MANAGEMENT – OKTA

* Support Okta-based identity and access management services.
* Assist with SSO, MFA, authentication policies, and application integrations.
* Support investigation and resolution of authentication, federation, MFA, and application-access issues.
* Work with relevant teams on identity federation and integration requirements using technologies such as SAML, OAuth 2.0, and OpenID Connect (OIDC).
* Support reviews of authentication and access configurations and recommend security improvements.
* Assist with integration of Okta with VPN, ZTNA, applications, and other enterprise technologies.

NETWORK ACCESS CONTROL – ARUBA CLEARPASS

* Support Aruba ClearPass Network Access Control (NAC) operations.
* Assist with authentication, authorisation, device profiling, and network-access policy activities.
* Support investigation and troubleshooting of endpoint authentication, connectivity, posture, and policy-enforcement issues.
* Work with Network and Identity teams on ClearPass integrations with wired and wireless infrastructure and directory services.
* Support reviews and improvements of network-access policies based on user, device, and security requirements.

SECURITY ENGINEERING & OPERATIONAL SUPPORT

* Monitor the health, availability, coverage, and effectiveness of supported security technologies.
* Investigate security issues and coordinate resolution with internal technical teams, vendors, and product support where required.
* Support security incidents, technical investigations, and remediation activities.
* Implement approved security changes in accordance with established change-management processes.
* Maintain technical documentation, configuration records, operational procedures, and knowledge articles.
* Prepare operational reports covering security posture, vulnerabilities, control health, trends, and remediation status.
* Identify opportunities for security process improvement, automation, and operational efficiency.
* Provide technical evidence and support for security assessments, audits, and compliance activities.
* Collaborate with Security Operations, Network, Infrastructure, Cloud, Identity, and Application teams to improve the overall security posture.

REQUIRED EXPERIENCE

* 2-3 years of relevant hands-on experience in cybersecurity engineering, security operations, network security, cloud security, identity and access management, or related security engineering roles.
* Demonstrated experience supporting security technologies in medium to large enterprise environments.
* Ability to independently administer, configure, troubleshoot, and support enterprise security technologies.
* Experience working across Security, Network, Infrastructure, Cloud, Identity, and Application teams.
* Strong problem-solving skills with the ability to investigate technical issues and drive them through resolution.

MANDATORY TECHNICAL EXPERIENCE

Candidates must have practical, hands-on experience with all of the following:

* Tenable – vulnerability scanning, authenticated scanning, compliance/configuration assessment, security hardening, finding analysis, remediation validation, and scan troubleshooting.
* Microsoft Defender for Cloud – Cloud Security Posture Management (CSPM), Secure Score, security recommendations, workload protection, alerts, security policies, and remediation.

FOUNDATIONAL TECHNICAL KNOWLEDGE

* Networking & Network Security – TCP/IP, DNS, DHCP, routing, VLANs, network segmentation, firewalls, and common network protocols.
* Operating System Security – Windows and Linux security, system hardening, patching, and secure configuration concepts.
* Identity & Access Management – Active Directory, Microsoft Entra ID, IAM, SSO, MFA, RBAC, SAML, OAuth 2.0, and OpenID Connect.
* Vulnerability & Configuration Management – vulnerability management lifecycle, security configuration management, CIS Benchmarks, and secure configuration baselines.
* Cloud Security – Microsoft Azure security fundamentals, including identity, networking, access control, security posture, and workload security.
* Cryptography & Secure Communications – TLS, digital certificates, encryption, and PKI fundamentals.
* Security Monitoring & Incident Response – security logging, monitoring, alert investigation, and incident response fundamentals.
* Zero Trust Security – Zero Trust principles, least-privilege access, identity-based access, and secure-access concepts.
* Enterprise VPN – understanding of VPN architecture, secure remote-access policies, authentication, connectivity, and common troubleshooting concepts.
* Okta – understanding of SSO, MFA, authentication policies, identity federation, application integration, and access-management concepts.
* Zero Trust Network Access (ZTNA) – understanding of policy-based secure access, identity- and context-based access, application access, and ZTNA architecture.
* Aruba ClearPass – understanding of Network Access Control (NAC), authentication and authorisation, device profiling, policy enforcement, and network-access concepts.

PREFERRED / ADDITIONAL SKILLS

* Microsoft Defender for Endpoint / Microsoft Defender XDR.
* Microsoft Sentinel or another enterprise SIEM platform.
* Privileged Access Management (PAM) technologies.
* Firewall and network-security platforms.
* Azure Policy and other Azure-native security controls.
* PowerShell or Python scripting for automation, reporting, or operational tooling.
* Experience integrating security platforms using APIs.

QUALIFICATIONS

* Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.
* Relevant industry or product certifications are advantageous, s

View and apply on HireChats