IT Security Engineer - 1776 at Thorlabs

Ely, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

03 Jun, 26

Salary

0.0

Posted On

05 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

SIEM, Network Security Tools, Firewalls, IDS/IPS, NAC, EDR, Cloud Security Tools, Application Security Tools, WAF, Pen Testing, Linux, Windows, PowerShell, Python, Vulnerability Management, Risk Assessments

Industry

Industrial Machinery Manufacturing

Description

What is the job? The Security Engineer is responsible for implementing, maintaining, and supporting security solutions and controls and processes across various security domains. This position focuses on improving the reliability and operational efficiency of security solutions while supporting ongoing and future cybersecurity initiatives. This hands-on Security Engineer works closely with other IT and security teams to ensure security services, such as cloud, network, systems, middleware, and endpoint security, are effectively deployed and configured to address potential threats. This role can be based at our UK or Germany site. Working Hours: Monday to Friday 9.00 am – 5.30 pm with an unpaid lunch break of 1 hour each day – 37.5 hours a week (flexibility will be needed around these hours to cover work with Thorlabs entities globally) – this role is eligible for hybrid working. Whilst the role is based in the UK, there may be occasions when you will need to work hours that support our US entities. What we would like you to do/ to see… · Assist in deploying and maintaining security solutions for IT infrastructure and applications. · Support the development and implementation of automated security measures to identify and address vulnerabilities. · Collaborate with IT Infrastructure and Security Operations teams to ensure security requirements are integrated into IT workflows and tools. · Support vulnerability management processes, including assisting in the identification, prioritization, and remediation of security vulnerabilities. · Monitor and analyze security systems to ensure optimal performance and compliance with company policies. · Contribute to the integration of security processes into change management and infrastructure deployment workflows. · Provide support for security assessments and testing activities to proactively identify and mitigate risks. · Work closely with the Governance, Risk, and Compliance (GRC) team to support compliance activities and ensure adherence to regulatory frameworks. · Partner closely with Security Operations Center (SOC) teams around detection, alert and Security Orchestration Automation and Response (SOAR) Who we are? Thorlabs is a global, industry leading optical technologies company. We are experts in the design and manufacture or a range of innovative photonics products. We use these products in manufacturing and research, from fibre optics to piezo motors. We are the gold standard with optics laboratories worldwide. There are now 22 facilities across the world in 9 countries. Where you will be working? It’s a hybrid role following the relevant training and settling in period (Usually between 1/3 months depending on site location – UK or Germany) What is essential to us… · Bachelor’s degree in computer science, Engineering, related field, or equivalent work experience. · 5-7 years of experience in IT or cybersecurity roles. · Hands-on experience with at least two of the following areas: Security information and event management (SIEM), Network Security Tools (Firewalls, IDS/IPS, NAC), Endpoint Detection and Response (EDR), Cloud security tools. · Application Security Tools (Web Application Firewall, Pen Testing) · Experienced in Linux and Windows operating systems, and enterprise network equipment. Bonus: experience with Microsoft Sentinel, and Microsoft Defender suite of products. · Experience with compliance and regulatory requirements, including GDPR, HIPAA, CCPA, and regulatory frameworks (PCI, NIST, CIS, ISO). · Familiarity with cloud platforms like Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform. · Basic knowledge of security baselines, vulnerability management, and risk assessments. · Proficiency in scripting languages such as PowerShell or Python. · Understanding of cybersecurity fundamentals, including attack methods, risk mitigation strategies, and incident response. · Certifications such as Security+, CCNA Security, or similar are preferred but not required. · Strong communication and collaboration skills. · Strong analytical and problem-solving skills, with the ability to anticipate and mitigate security risks effectively. · Ability to work in a multidisciplinary project team to drive projects through to completion What will you get? At Thorlabs UK or Germany, there are lots of opportunities for inhouse customised training and development that accelerates your career progression. And the benefits are? Competitive Salary to attract the best, plus an excellent benefits package. Job Reference: THOR-VC-1776 This is a rolling campaign, so we will actively interview applicants. We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. We welcome applications from persons who are over 18 years old. *This is a legal requirement for UK roles, further information is here School leaving age - GOV.UK (www.gov.uk) All offers of employment are subject to eligibility to work. We would encourage all internal applicants to inform their line managers of their interest in this position. -Contributed Pension Scheme -Group Life Cover -Private Health Care -Group Income Protection & more. Please apply through the Apply for this job button or send a copy of your CV along with a covering letter and your salary expectations to: Human Resources at Thorlabs Ltd, 204 Lancaster Way Business Park, Ely, Cambs, CB6 3NX or e-mail recruitment@thorlabs.com. We are Disability Confident Committed In line with the requirements of the Immigration, Asylum and Nationality Act 2006, all applicants must have a valid permission to enter or remain in the UK with no condition that prevents them from working in the UK. Documented evidence of such permission will be required from candidates as part of the recruitment process.

Responsibilities

The Security Engineer implements, maintains, and supports security solutions and controls across various domains, focusing on improving reliability and operational efficiency of security solutions. This involves deploying and configuring security services for cloud, network, systems, middleware, and endpoint security while supporting ongoing cybersecurity initiatives.