- Company Name
- Motion Recruitment
- Job Title
- Security Engineer / Architect
- Job Description
-
**Job title:** Security Engineer / Architect
**Role Summary:** Lead the design, implementation, and management of enterprise security solutions, conduct risk assessments, penetration testing, and incident response, while optimizing security tools and embedding best practices across teams.
**Expectations:** Deliver secure architectures that meet regulatory standards, proactively reduce vulnerabilities, and support business continuity with minimal downtime. Act as a trusted advisor on security strategy and policy development.
**Key Responsibilities:**
- Architect and deploy IT security solutions (cloud and on‑prem) with Microsoft 365, Azure, SCCM, VPNs, MFA, and Palo Alto firewalls.
- Conduct risk assessments, vulnerability scanning, and penetration tests; analyze findings and recommend remediation.
- Lead incident response activities, including investigation, containment, and post‑mortem reporting.
- Optimize and manage security tools (Microsoft Defender, Sentinel, Azure AD, etc.) for efficacy and cost‑effectiveness.
- Collaborate with cross‑functional teams to embed security controls into development, operations, and deployment pipelines.
- Develop and maintain security policies, standards, and training materials to raise organizational awareness.
**Required Skills:**
- Minimum 5 years of professional experience in IT security engineering or architecture.
- Strong knowledge of cloud security (Microsoft Azure, Microsoft 365) and traditional security technologies (firewalls, IDS/IPS, VPNs, MFA).
- Proficiency in security standards and frameworks: NIST Cybersecurity Framework, ISO/IEC 27001, GDPR, and related compliance regimes.
- Experience with vulnerability management, penetration testing, and incident response processes.
- Excellent communication skills for translating complex security concepts to technical and non‑technical stakeholders.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, or related field (preferred).
- Industry certifications such as CISSP, CEH, CISM, or equivalent security credentials (highly desirable).