Post Office Ltd Careers – Cloud Security Engineer In London

Overview

Position Title: Cloud Security Engineer

Company: Post Office Ltd
Location: London, England, United Kingdom

Job Description

Post Office is looking for permanent and contract Cloud Security Engineers in order to build, maintain, upgrade, and continuously improves cloud networks and cloud-based systems.
The Cloud Security Engineers will be responsible for the operations of secure cloud infrastructure, platforms, and software.

Responsibilities: 

• Support cloud security products
• Providing standardised offerings to facilitate the successful secure access to stacks and the cloud environment overall
• Identity and Access Management, Identity Federation / SSO
• Inventory, capacity, and billing/tag management
• Cloud provider control-plane (console) audit and compliance
• Threat and Vulnerability Detection & Remediation
• Integration of security standards and controls into other cloud team products and offerings:
• Pair with application teams to design and implement secure coding and continuous security practices within their application
• SEIM and Audit Logging (AWS CloudTrail & Config)
• Metrics collection, aggregation, and visualization
• Log collection, aggregation, and correlation, Event management, and routing
• Management of Security Groups and Access Control Lists (ACLs), Perimeter security
• Data-in-Transit / Certificate Management, Data-at-Rest / Key/Secret Management

Requirements: 

 

• Excellent self-motivation, communication, and influencing skills.
• Experience in managing complex stakeholder relationships
• Proven experience in working in a team of professional staff immersed in a large complex organisation.
• The ability to assimilate a wide range of information, make practical judgments, and take appropriate decisions based on that data.
• Demonstrated problem analysis and resolution skills.
• Ability to share knowledge with colleagues to the overall benefit of the department
• Interpersonal and influencing skills, together with personal credibility, gain the trust and respect of the wider security community, as well as with people within the Post Office.
• Experience with infrastructure automation, infrastructure as code, automated application deployment, monitoring/telemetry, logging, reporting/dashboards, and continuous delivery technologies
• Experience with reading logs written in JSON
• Experience with encryption in-flight and at-rest practices, as well as certificate and secrets management, security event & incident management (SEIM)
• Prior work experience in delivery, managing, and quality assuring information security solutions
• Experience with infrastructure as code and DevOps methodologies.
• Experience with orchestration template technologies
• Experience with network/perimeter security platforms
• Design of native Cloud applications, Cloud application design patterns, and practices.
• xperience with continuous security practices, including threat modelling, threat and vulnerability management, secure coding practices, and automated penetration testing.
• Ability to cope with pressure, maintaining performance when under stress, and managing time effectively through the application of organisation and planning skills