kubernetesawssieminfrastructure as codecybersecurityincident responsepci dssvulnerability managementthreat hunting
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$101к$112кмедиана$130к
5 в выборке
82
Хорошая вакансия
развернуть
Роль описана четко и дает широкую ответственность за Blue Team, но охват нескольких программ и дежурства 24/7 могут означать высокую нагрузку.
Кликните для подробной информации
Дежурства 24/7Современные технологииШирокая зона ответственности
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Staff Security Engineer - Blue Team (UK) (Cybersecurity): Leading Olo’s Blue Team across information protection, threat detection and response, security services, and cloud security with an accent on vulnerability management, incident response, and security program oversight. Focus on hunting advanced threats, hardening Windows, macOS, Linux containers, and Kubernetes, improving AWS security controls, and coordinating response during critical incidents.
Location: Remote from anywhere in Northern Ireland; Belfast, Northern Ireland
Company
hirify.global provides restaurant technhirify.globalgy through ordering, payment, and guest engagement solutions on an open SaaS platform.
What you will do
Guide and coach the Blue Team across information protection, incident detection and response, and security service delivery.
Provide strategic and technical oversight, lead distributed security engineers and analysts, and coordinate threat hunting, detection, and response.
Lead information protection activities including security tool selection, testing, implementation, maintenance, security awareness, service provider management, vulnerability management, and threat hunting.
Oversee incident response programs, coordinate responses through all incident phases, maintain accurate incident reports, and participate in a 24/7 on-call rotation.
Monitor and remediate cloud misconfigurations and security risks, apply web application and API security principles, and improve controls through automation and new technhirify.globalgies.
Collaborate with Product & Engineering, Legal, People & Culture, Finance, GTM teams, customers, partners, auditors, and service providers on security reviews, risk assessments, vendor assessments, PCI, and SOC audit support.
Requirements
5+ years of experience in Security Engineering, Security Operations, or Security Architecture.
Experience acting as a technical lead for distributed teams consisting largely of remote engineers.
Experience complying with PCI-DSS and other compliance and regulatory standards.
Experience with attacker tactics, techniques, and procedures; evolving threats; attack patterns; incident response; and cybersecurity standards.
Experience developing and leading incident response, remediation, and mitigation activities, including status updates and reports.
Deep understanding of operating system, networking, and application concepts.
Experience hardening Windows, macOS, Linux containers, and Kubernetes; familiarity with AWS security best practices and Infrastructure-as-Code.
Experience deploying and maintaining security technhirify.globalgies including access proxies, API gateways, anti-malware, application control, cloud security posture management, data leak prevention, data mapping, endpoint detection and response, intrusion detection systems, file integrity monitoring, firewalls, mobile device management, multifactor authentication, SIEM, static inspection, vulnerability assessment, web proxies, WAF, and Zero Trust.
Ability to work during critical incidents and support coverage requirements.
Nice to have
CISSP, GCIH, or a similar certification.
Culture & Benefits
Remote work from anywhere in Northern Ireland.
Participation in a 24/7 on-call rotation.
Collaboration with distributed engineering teams and external customers, partners, auditors, and service providers.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →