Security Design Engineer

Security Design Engineer - 6 Month Contract - INSIDE IR35 - Sheffield, Manchester, Birmingham - No Sponsorship Available

Job Description

The Design Engineer is responsible for Architecture of Network Security components as related to zero trust in a platform transformation programme. The Design Engineer must act as a bridge between traditional network security controls and modern identity-based security provided by a service mesh. This role must assess how existing network security controls interact with service mesh capabilities and produce E2E solution designs, standards, patterns and related artefacts.

This is part of a larger platform initiative and requires extensive collaboration across the organisation. Responsibility for reviewing, designing and collaborating with numerous business units is also key to the position. This is a multi-faceted role involving numerous areas of expertise and stakeholders across the enterprise.

Design Engineers must be comfortable presenting and sharing solutions, standards, patterns at design authorities, and with senior leadership & stakeholders. Additionally, the Security Design Engineer will provide technical thought leadership and direction to their aligned projects and operate as a Subject Matter Expert, providing consultancy.

Principal Requirements

Expertise:

Application design from platform selection, to deployment with significant experience designing to meet scale, demand and in a secure fashion (eg. Dev Sec Ops )
Knowledge and practical experience of implementing modern application architecture practices, from CSP-native, to Hybrid designs, EDA along with microservices and serverless
Deep practical and considerable experience in Cyber Security:
Threats and modelling, Risks and assessments, Attack vectors, vulnerabilities, CEH and red/purple teaming
Assess how existing network security controls apply within service mesh (eg. Firewalls, NIPS/NIDS, WAF, Proxies, DDoS, Segmentation)
Significant practical experience and proven technical depth across network security:
Firewall design and implementation, next-gen capabilities
NIPS/NIDS design and implementation, automation, workflow and framework
WAF design and deployment within internally and externally presented apps
Forward Proxy design and implementation across numerous use-cases
Reverse Proxy platform design and deployment protecting apps, APIs
Denial of Service design and implementation from volumetric to application
Network Segmentation design securing application components from threat susceptibility
Network visibility and traffic monitoring
Large scale distributed systems
Modelling and documentation of communication flows
Automation and workflow-driven protections
Defence in depth along with related capabilities: TLS, PKI and identity-based controls
Practical working technical knowledge of Service Mesh:
experience with one or more vendors (eg. Istio, Kong)
Sidecar and mTLS implementation
Workload identities in conjunction with gateways
Identity and Access Management using modern authNZ (eg. OIDC, JWT etc.)
Logging & Monitoring for security, optimisation, delivery of intelligence and insights
Management access and isolation including recording of changes
Analysis of rules, gaps, traffic seen and proactively updating programmatically
Anomalous traffic flows and inspection to identify
Ensuring regulations and compliance can be attested to through visibility
External capabilities and integrations that can provide intel and visibility of security
experience in large-scale global Financial Services and Regulatory requirements, audits
Maintaining a data-driven, evidence-based approach to decision making
Demonstrable proven experience authoring Standards, Patterns, Designs utilising industry standard methodologies and references (eg. NIST, SANS, ISO, ITU, ISF etc.)
Documentation of above areas including but not limited to:
Standards, Patterns, Strategies, Roadmaps and recommendation papers, positioned at senior leadership and engineers
Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level

Qualifications &

Certifications:

• Bachelors or Masters degree…