Senior Cyber Security Engineer

Job description

Senior Cyber Security Engineer

Consultant

Reading

Hybrid

Full Time

Permanent

XPS Group is a leading UK consulting and administration business specialising in the pensions and insurance sectors. At XPS, our vision is to create a vibrant place to work where difference is recognised as a strength and where talented people can flourish and achieve their highest potential.

Our Cyber Security business continues to grow and we are now looking for an experienced Senior Cyber Security Engineer to join our vibrant Reading office with hybrid working. This is an exciting role and would most likely suit someone with previous experience in a similar Cyber role where they have gained knowledge and experience in performing daily security engineering tasks and assist with security hardening projects to protect IT infrastructure, networks and data.

A FTSE 250 company, XPS combines expertise and insight with advanced technology and analytics to address the needs of over 1,400 pension schemes and their sponsoring employers on an ongoing and project basis. We undertake pensions administration for over one million members and provide advisory services to schemes and corporate sponsors in respect of schemes of all sizes, including 88 with assets over £1bn.

We also provide wider ranging support to insurance companies in the life and bulk annuities sector.

Our people drive our success and as an XPS employee you can bring your whole self to work - Everyone is treated equally and with respect. We will provide you with the support and training you need to grow and be at your very best. It’s about inclusion and diversity, ensuring all our people feel included, that they belong to XPS and that they’re happy.

Above all, it’s about ensuring everyone has a voice and feels valued. Because they are.

XPS Cyber Security is an expanding team made up of internal cyber security engineers and cyber security operations analysts with an external 24/7 Security Operations Centre. The Senior Cyber Security Engineer role will be challenged with researching and implementing the latest technologies in the industry. This environment is highly technical and collaborative.

As a Senior Cyber Security Engineer with XPS you will:

• Using expert security knowledge, provide technical security guidance for securing IT assets, change control, security testing, secure systems design and making recommendations to implement effective security controls.
• Take ownership of day-to-day running of technical vulnerability management programme. Use expert security knowledge with a particular focus in application security testing, web application firewalls, vulnerability management and securing development pipelines to make improvements.
• Provide security direction and leadership as required with ability to mentor other security team members.
• Carry out cyber security engineering tasks using best-practice service management (ITIL), to agreed SLAs/KPIs, whilst promoting and adhering to XPS workplace values.
• Develop an understanding of the threats, risks, vulnerabilities and evolving attack vectors facing the business.
• Represent Security as Subject Matter Expert in meetings and projects.
• Assist the Operations team with timely security incident investigation to recover service in complex cross-technology environments.
• Assist in group security training and awareness campaigns.
• Assist in reviewing the market for effective information security solutions.
• Assist in annual review of suppliers’ information security processes.
• Assist as required with client information security questionnaires.
• Assist IT with Security Administration.

• Experienced security engineer with demonstrable detailed knowledge of security products, Web Application Firewalls, access control, SIEM, AV, email and web security gateways, firewalls, load-balancers, ACLs, TCP/IP, routing and switching.
• Knowledge of current and future security initiatives e.g. OWASP standards, SASE intelligence led penetration testing, zero-trust, threat centric security, risk-based vulnerability management.
• Come from an infrastructure/networks background to fully support XPS changes and…