Senior Information Security Engineer

Roles & Responsibilities:Platform Security & Hardening:

• Own and continuously strengthen the information security posture of VuNet's Business Observability platform across SaaS, cloud-native, hybrid, and on-premise deployment models.

• Lead comprehensive security assessments, including application security testing, API security testing, infrastructure security reviews, penetration testing, and CIS benchmark validation.

• Define, implement, and govern security controls across cloud environments, Kubernetes platforms, containerised workloads, and enterprise deployments.

• Establish and maintain secure deployment standards, hardening guidelines, and security architecture recommendations for both customer-managed and cloud-hosted environments.

• Manage endpoint security and EDR platforms, including endpoint hardening, malware protection, detection engineering, and security monitoring across enterprise assets.

• Support enterprise security initiatives, including VPN security, identity and access management, infrastructure hardening, and privileged access controls.

DevSecOps & Vulnerability Management:

• Drive DevSecOps initiatives by integrating vulnerability management, SAST, DAST, container scanning, dependency scanning, compliance validation, and security gates into CI/CD pipelines.

• Own the end-to-end vulnerability management lifecycle, including CVE analysis, CVSS-based risk assessment, prioritisation, remediation tracking, validation, and reporting.

• Develop and maintain security automation using Python, Bash, and scripting for vulnerability assessments, reporting, and security operations.

• Maintain Software Bill of Materials (SBOMs), open-source software inventory, license compliance, and software supply chain security controls.

• Evaluate, implement, and optimise security technologies for application security, cloud security, vulnerability management, compliance automation, and security monitoring.

Security Architecture & Risk:

• Lead threat modelling exercises, security design reviews, and risk assessments for new products, features, and architectural changes.

• Maintain security policies, standards, procedures, audit evidence repositories, and risk management frameworks.

• Stay ahead of emerging threats, evolving regulations, and industry best practices to continuously improve VuNet's security posture.

Compliance & Governance:

• Drive compliance and governance programs, including ISO 27001, SOC 2 Type II, GDPR, customer audits, and regulatory security requirements.

• Act as the primary security stakeholder during customer security reviews, vendor assessments, compliance evaluations, and technical due diligence engagements.