Security and Infrastructure Engineer

We are looking for a security and infrastructure engineer who is detail-oriented, proficient with current technologies and virtualized hardware, and who flourishes in a fast-moving and at times, high-pressure environments. We expect the security and infrastructure engineer to work with primarily the technology and operations team, software developers, and external partners. His/her responsibilities include upgrading and improving operating environments, creating remediation strategies, and providing technical support and occasional training for users.

The security and infrastructure engineer should have good communication and collaboration skills, excellent analytical, problem-solving, and time-management skills, and familiar with data privacy and protection regulations. The Security and Infrastructure Engineer must be self-directed and comfortable supporting the security and technology infrastructure needs of multiple stakeholders, processes, solutions and systems.

The Security and Infrastructure Engineer reports to the CTO (Chief Technology Officer).

-

Key Responsibilities

-
Installing and maintaining AWS cloud operating environments

-
Configuring and maintaining AWS security applications

-
Monitoring the Production environment and ensuring availability SLAs are met

-
Responding effectively and speedily to any problems

-
Ensuring operating environments stay safe and secure

-
Updating any software where necessary (patch management)

-
Ensure KLDX data is secure with appropriate role-based access controls

-
Ensure KLDX Platform data is securely and completely backed up and archived

-
Documenting all reported security and infrastructure-related incidents and actions taken in response

-
DRP management and testing

-
Liasing with the SOC – first primary contact with the SOC when security incidents occur

-
Management of security incidents until their resolution and completion of the root-cause analysis report

-
Ensuring knowledge of cyber security domain is up to date and translating that to security related tasks to ensure the platform is continually secure against potentially new threat vectors

-

Skills/Other Details

-
AWS Cloud Network configuration and management

-
AWS Cloud VM/container management

-
AWS security and network/infrastructure management (AWS WAF and Shield)

-
AWS IAM and Cognito configuration and management

-
AWS KMS and Secrets Manager configuration and management

-
AWS CloudHSM configuration and management

-
AWS CloudFront configuration and management

-
AWS CloudWatch and CloudTrail audit configuration and management

-
AWS Patch Manager based patch management

-
AWS MSK or Apache Kafka running in an EC2 instance

-
Trend Vision One management

-
ECR with ECS scaling over Fargate configuration and management

-
AWS Capacity and Usage optimisation

Experience

-
Experience in financial services (banking and/or capital markets) is a plus

Qualifications

-
BSc. or MSc. in Computer Science, or equivalent