DESCRIPTION

Are you ready to raise the bar on cyber security and contribute to making information systems cyber resilient?
We are looking for a Security Engineer to join our Information Security team at our inclusive and beautiful Oxford headquarters. You will be working across our internal technology teams bringing your full self, including your security knowledge and expertise to these teams.
As Security Engineer at Aurora Energy Research, you will enable our colleagues to improve the security posture of our information systems, ensure secure operational practices, and support compliance. You have a curious mindset, thrive in collaboration, and are passionate about new technology. You are solution-oriented and focus on getting smart ideas into the hands of our teams. You enjoy working simultaneously on various initiatives and moving between teams.

WHAT WE ARE LOOKING FOR

Required qualifications, capabilities, and skills:

• Degree in an information security related subject or comparable working experience related to the role.
• Experience in a systems engineering role, ideally with focus on security.
• Working knowledge of industry recognised practices to secure endpoints, identity and data.
• Working knowledge of best-practices for securing Microsoft 365 based infrastructure.
• Working knowledge of SaaS security practices with a focus on implementing zero-trust principles.
• Understanding of global security standards (like SOC2 or ISO 27001) and regulatory requirements and experience in maintaining compliance with these.
• A desire to teach others and share knowledge. We aren’t looking for hero engineers, we look for team players. We want you to coach other team members on secure systems management practices, design principles, and implementation patterns.
• Comfortable in uncharted waters. We are building something new. Things change quickly. We need you to learn technologies and patterns quickly.
• Ability to see the long term. We don’t want you to sacrifice the future for the present. We want you to choose technologies and approaches based on the end goals.
• Clarity of thought. We operate quickly and efficiently, and we value people who are economical with their time and clear with their opinions.

Desirable qualifications, capabilities, and skills:

• Working knowledge of incident analysis and response.
• Understanding of security vulnerabilities and remediation options in cloud-based infrastructure.
• Working knowledge of methods for authentication and authorization (ODIC, OAuth 2, FIDO 2, etc).

• Cultivate security culture. Work with colleagues in internal technology, be the security champion that strives to prioritize sustainable controls and drives real risk reduction outcomes.
• Build secure solutions. Ensure security is considered throughout the systems design and development as well as subsequent operations. Provide security best practice, build security design patterns, complete security architecture reviews, threat models and risk assessments. Help solve engineering problems by implementing technical controls to mitigate risk.
• Ensure we are deploying solutions into a secure environment. Build solutions in alignment with our control requirements. Support on-going business-as-usual. Champion vulnerability and exposure management. Lead on internal security consultancy, audit engagements, risk activities and project initiatives. Work closely with colleagues to ensure effective technology risk management.
• Work together. Collaborate and work with internal technology teams. Help to solve problems and not just calling out issues. Take ownership of operational duties. Operate across the business to create alignment with security objectives.
• Ensure security thought leadership. Keep up on security best practice and be a continuous learner. Guide and define our security policies, procedures, and standards end-to-end, be recognized as a point of escalation and subject matter expert for information technology and data risk.