About the Role:
The Security Engineer plays a crucial role in the development, implementation, maintenance, and monitoring of security controls at LMAX. This position focuses on security technologies and requires individuals with a curious mindset and the ability to identify vulnerabilities at both technical and process levels. Security Engineers must stay updated with the latest tools, security methods, and developments.
About You:
You are passionate about information technology, understand computer systems and networks to a high level and can work with a variety of operating systems and programming/scripting languages. You have an inquisitive mindset, showing the ability to identify vulnerabilities at both technical and process levels, and to explain your findings to a non-technical audience.
You have an automation-first mindset, understand information security standards and have experience implementing best practice in on-premises and cloud-based environments.
You are capable of working independently in a fast-paced environment. We encourage independent problem-solving, but also expect you to engage with your peers and work with them to break knowledge silos. You will initiate constructive discussions and propose solutions to any challenges encountered. Most importantly, you understand the necessity of harmonizing security endeavours with business goals.
Main Duties & Responsibilities:
Core:
• Map attack paths and help implement controls to manage associated risks.
• Create and maintain processes and procedures to demonstrate system control to auditors and regulators.
• Work within the Security Operations Centre to implement and maintain security controls, whilst ensuring objectives are met
• Participate in the security incident management process, including cyber incident response and remediation
• Contribute to internal and third-party IT audits across business functions and activities within the LMAX Group.
• Create, maintain, and deliver cyber security awareness training for colleagues.
• Manage and maintain the security infrastructure and solutions
• Identify opportunities for process improvement and implement associated automations as required.
Mainstream:
• Manage and mitigate technical vulnerabilities, working with internal teams and external suppliers towards remediation
• Review and fulfill security requests from the business for various services.
• Help manage security risks by reviewing business requests and ensuring security posture is unaffected
• Proactively investigate host, network, and log-based security events and respond to suspected compromises.
• Collaborate with identity and access management, associated policies and controls
Once more advanced in the role:
• Manage and maintain the security infrastructure.
• Research and evaluate technologies to mitigate cyber security threats.
• Assist with successful handling of major security incidents and investigations.
• Establish strategies and procedures for offensive security testing, engaging with external partners when needed
• Maintain high visibility into the LMAX estate for security events, while minimizing false positives.
Success Looks Like:
• Ensure compliance with security best practices in network operations, system management, and processes.
• Increased signal-to-noise security events ratio
• Support the successful completion of internal and third-party led audit efforts.
• Minimize the number of successful phishing attacks and other end-user security incidents.
• Demonstrate rapid response capabilities during attacks and provide clear reporting to management.
• Receive positive feedback from technology teams and other business stakeholders.