Security Engineer

Popis nabídky

How You'll Support Our Mission ESO's teams are growing, and our software is in demand globally by firefighters, paramedics, hospitals and governments. To meet this demand, we are building an industry-leading cyber security team to protect our customers and data from a variety of fast moving and constantly evolving threats. We are looking for a Security Engineer to join our global cyber security team, working from the Czech Republic and partnering with colleagues in Belfast, the US and Denmark. Work alongside our fire, hospital and EMS Engineering teams to secure our mission-critical applications. These applications are used to help our customers go about their daily job of protecting their communities and saving lives. You will be helping to design and implement systems using techniques such as defense in depth, threat modelling and zero trust across Microsoft Azure cloud native technologies. Our security engineers have a high degree of autonomy, and are part of a high functioning, motivated and forward-thinking team. You have the chance to join a diverse, growing and passionate team, working on critical products, whilst being supported with training opportunities and mentoring. Joining our team will be an amazing and truly rewarding experience. What You'll Be Doing - the day to day " Have significant impact on the security of our systems that are used by thousands of fire fighters, paramedics and hospitals worldwide. " Be a key part of our cyber security team, with demonstrable impact on the security of our systems and applications.? " Help our teams to model threats using the STRIDE model, against new designs, ensuring appropriate protection and controls are in place. " Make a difference by mitigating vulnerabilities across our systems, helping developers to produce secure code and evaluating new next-gen security technologies. " Respond to security and compliance issues generated via analysis or automated tools. " Work collaboratively cross-team, to impart your expertise across the organisation. " Be in the detail, working shoulder-to-shoulder with our technology teams. Who You Are - some of the essential things required to be successful in the role " At least 2 years' experience in securing software or infrastructure in cloud platforms (e.g. Microsoft Azure) " Your experience should include; " Securing systems in line with 'Well Architected Frameworks' e.g. Azure Well Architected Framework " Network experience - whether designing and building, managing or troubleshooting - you should have experience and confidence in your networking knowledge " Applying security to networks, hosts, web applications and cloud native deployments " Working with toolsets such as: asset management, vulnerability management, firewalls, SIEM, PAM, IDS/IPS, EDR/XDR, DLP, SWG, WAF, CSPM, CNAPP " Designing, deploying, or managing code security controls to support SAST / DAST / IAST / RASP deployments in our environment " You should also: " Be well versed in securing Continuous Integration / Continuous Deployment practices " Understand current attack tactics, techniques and procedures along with the use of MITRE Attack framework " Be inquisitive, have a passion for what you do and understanding how your work impacts and contributes ESO's success Who You Are - it's desirable if you have any of the following " Exposure to Infrastructure as Code and Azure native technologies " Experience with threat modelling, NIST and CIS frameworks " Knowledge of application security standards such as OWASP Top 10, SANS / CWE 25 Benefits & Perks: " Paid Vacation: 5 weeks of paid vacation to recharge and connect with family and friends. " Sick Time Conversion: Convert unused sick time into additional vacation days. " Meal Vouchers: Access to delicious meals and snacks during your workday. " Ergonomic Workspace: Electrically adjustable desks, comfortable chairs, laptop, phone, and internet.