Total 1,035 system engineer job vacancies in Legal / Public / Security category in Malaysia

Security Engineer, Identity and Access Management (IAM) Analyst
c. £65,000 per annum
Bedford Based
Hybrid Working
Permanent

As Security Engineer, Identity and Access Management (IAM) Analyst at Money and Pensions Service (MaPS), you will be responsible for supporting the Cyber Security Manager and the Identity and Access Manager with cybersecurity and IAM operations, continuous service improvement and identity management, protecting the organisation’s cloud technology platforms, data and identities.

The post holder will ensure that best practices for cybersecurity and IAM are implemented and documented, and that the organisation is compliant with regulatory and audit requirements.
Duties include managing the operational security and IAM toolsets including MIMECast, Windows Defender, Symantec WSS, Tenable and Microsoft Office 365 Security and Compliance, Intune and JAMF for MAC security, Entra ID and Okta.

The role will embed regular reporting of the security and IAM performance of the technology infrastructure and report on exceptions or breaches of policies and procedures.
This position will be working with colleagues across the organisation, including an outsourced managed security operations centre and provide cover for the Cyber Security Manager and Identity Manager.

The role includes hands on activities to deliver and support the Cyber and IAM Strategy. The Security Analyst should have a number of years’ experience in the security industry and hold a broad skillset enabling them to support numerous technologies quickly and effectively. Any professional security qualifications would be beneficial.

Here is an insight to Money and Pension Service:

At the heart of the Money and Pensions Service are our values – caring, connecting and transforming, which are the foundation of our success. They permeate every area of our work and define all our business relationships and the way we work with each other. We’re not only looking for the best people to come and work for us, but we need people who align themselves to our values.

We care about our colleagues and people whose lives we are here to transform, we will transform lives through our ability to make positive connections, and we are committed to transforming lives and make a positive societal impact.

We help people – particularly those most in need – to improve their financial wellbeing and build a better, more confident future. Working collaboratively across the UK, we make sure customers can access high-quality money and pensions guidance and debt advice throughout their lives, however and whenever they need it.

By fostering our values, we are very proud of the inclusive working environment that we have created. We are committed to attracting people of all backgrounds, we want our colleagues to reflect our customers and the people we assist.

In this role you will be responsible for the following;

• Support the current Cyber Security Manager and Identity and Access Manager.
• Demonstrate a passion for cybersecurity and IAM, experience in monitoring security controls and Authentication, Authorization, and Accounting implementation and governance.
• Providing advice to the organisation, ensuring compliance with appropriate regulations and, generally, on information risk
• Experience of optimising security and IAM toolsets – including antivirus (Windows Defender), Office 365 Security & Compliance, vulnerability management and patching. JAMF for Apple MAC, Entra ID and Okta.
• Understanding of a broad range of security tools using Microsoft tooling where possible, including but not limited to SIEM, Email Security, DLP.
• Delivering new cybersecurity toolsets and capability as required and investigating cybersecurity incidents and undertaking reporting/remedial action as required.
• Maintaining risk, issue and change registers for cybersecurity and identity.
• Build and maintain methodology and technology used to implement Identity Governance and Administration (IGA) and Identity and Access Management (IAM) systems including SSO. MFA, Provisioning / Reconciliation, Federations, Access reviews.
• In-depth knowledge of multifactor authentication (MFA) architectures, Role-based Access Control (RBAC) and Attribute-based access control (ABAC)/Policy-based access control (PBAC) implementations and best practices.
• Ability to work independently and as part of a team when required.
• Work collaboratively within Infrastructure Services and other IT functions to ensure effective management and delivery of Security and Identity and Access Management services.

You will need to demonstrate the following skills and experience;

• Microsoft 365 Security stack (all elements).
• Cloud security experience, tooling, best practices, security posture.
• Experience of writing various security policies and documentation.
• Implementation of Identity Governance and Administration and Identity and Access Management systems including SSO, SAML, OpenID.
• Good knowledge of MFA, RBAC.
• EntraID experience, setup and improvements (not just resetting user passwords).

About MaPS:

At MaPS, we help people – particularly those most in need – to improve their financial wellbeing and build a better, more confident future. Working collaboratively across the UK, we make sure customers can access high-quality money and pensions guidance and debt advice throughout their lives, however and whenever they need it.

At the heart of the Money and Pensions Service are our values – caring, connecting and transforming, which are the foundation of our success. They permeate every area of our work and define all our business relationships and the way we work with each other. We’re not only looking for the best people in and around Bedford to come and work for us, but we need people who align themselves to our values: -

• Caring - We care about our colleagues and people whose lives we are here to transform.
• Connecting - We will transform lives through our ability to make positive connections.
• Transforming - We are committed to transforming lives and make a positive societal impact.

Our inclusive working environment:

By fostering our values, we are immensely proud of the inclusive working environment that we have created. The diversity of our people is a strength that we embrace and wish to build upon, so we are committed to attracting people of all backgrounds.

We work hard to ensure that we have a progressive approach to inclusion, equity and belonging. We really do want our colleagues to “bring their whole selves to work.”

By way of brief example, we have an enviable ethnic diversity mix, equal gender balance with a zero mean gender pay gap and thriving colleague and ally networks, including LGBTQ+, neurodiversity, women’s health, men's health, ethnicity, and diversity.

What Money and Pensions Service can offer you?
• Generous Annual Leave – 30 days plus Bank Holidays
• Pension scheme – contributions matched 2 to 1 (up to 10% of your salary)
• Interest-free loan to help you buy season tickets for buses and trains
• Cycle to work Scheme
• Subsidised eye test & flu jabs
• Life assurance scheme
• Give as you earn scheme
• Employee assistance programme (EAP)
• PAM Assist and PAM Life scheme (Wellbeing)
• Enhanced family and sick pay
• Paid volunteering (2 days a year)
• Recognition Scheme
• Discounts portal to numerous retailers

At MaPS, we take pride in our flexible approach to work. Most of our roles can operate on a hybrid basis with a minimum of 2 days in the office per week. Hybrid working is a voluntary, noncontractual arrangement and your office will be your contractual place of work. The number of days that anyone will be able to work at home will be determined primarily by business needs.

Job Reference: MaPS00675
Close Date: 26/11/2024

Proud member of the Disability Confident employer scheme

Requirements

The role requires handling of measurement and detection equipment for military and homeland security. The ideal candidate should possess strong IT skills including, software installation and configuration. The resposibilities includes managing sales product inquiries, overseeing post-sales equipment delivery, performing regular maintenance, and conducting diagnostic analyses for troubleshooting and repair. A keen learning attitude and strong problem-solving ability are essential in this position. The candidate will also be expected to prepare basic reports. Effective communication and interpersonal skills will be important for maintaining and strengthening existing customer relations.

• Execution of service and maintenance workflow
• Liaise closely with client representatives on all service/maintenance related issues
• Assisting the supervisor in employing teams on service deliveries and distribute responsibilities
• Manage day-to-day client interactions and expectations for optimal results
• Provide support to supervisor in ensuring the timely delivery and completion of troubleshoot and service/maintenance of security systems at clients’ premises
• Familiarize yourself and deliver customer satisfaction base on each client’s business, organization and objectives.
• Ensure that works carried out are in compliance with the Workplace Safety and Health Act
• Perform any other technical tasks as and when required

Requirements

• Min Diploma or Higher Nitec in Mechatronics/Electrical/Electronic Engineering or relevant with at least 2 years working experience
• Hands-on experience in security systems such as Integrated Security Management Systems, Card Access Control Systems, Intrusion Detection Systems and CCTV systems is a must
• Hands-on experience in security system configuration, application programming and integration with third-party systems will be an advantage
• Technology savvy (hardware & software)
• Problem solving skills
• Must be a team player

Summary

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other’s ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It’s the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you’ll do more than join something — you’ll add something. There is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms, which include iOS software, iOS Devices, and Mac. We build solutions that are used by our customers, engineering teams, and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical, hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle, world-wide hardware manufacturing ecosystem and associated global IT infrastructure. As a member of our fast-paced group, you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apple’s customers every day. If you’re excited by the idea of making a real impact, and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world, a career with Apple will be your dream job.

Description

Our organisation provides security server-side solution to enable various Apple product security features. As part of security team in this organisation, we are looking for someone who can drive advancements in security practices, proactively identifying security vulnerabilities, fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

• Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure.
• Develop and execute new test plans, methodologies, and tools for assessing hardware and software security.
• Conduct static code analysis to identify and triage application security issues. Work closely with DevOps and engineering teams to remediate application security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC).
• Perform reverse engineering and forensic analysis on software & hardware to identify security vulnerabilities and its exploitability.
• Rotate between red and blue functions and conduct simulated attacks & defence. Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation.
• Collaborate with hardware design teams to integrate security best practices during product development.
• Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation.
• Fulfil on-call responsibilities for handling security-related incidents.
• Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques.

Minimum Qualifications

• Understanding of fundamental IT domains including Networking, Operating Systems, Security Principles, Secure Coding Practices, Cryptography and System Administration.
• Hands-on experience in security penetration testing, red team exercises, Capture The Flag (CTF) competitions or security related hackathons.
• Understanding of software development and secure coding best practices.
• Respect diversity and inclusiveness in a global organisation with ability to collaborate and communicate effectively
• Ability to analyse complex problems, explore the greenfield and devise creative solutions.
• Willingness and ability to travel internationally (up to 1 weeks at a time).
• Strong team player with adaptability

Preferred Qualifications

• Knowledge in reverse engineering and exploit development.
• Understanding of cryptographic algorithms, secure boot, secure firmware update mechanisms is a plus.
• Understanding of hardware architecture, microcontrollers, processors, and firmware development and have knowledge in hardware security tools and techniques (e.g., JTAG, oscilloscopes.) is a plus.

As a Cloud Security Engineer, you will deliver expert technical guidance to customers adopting Google Cloud services. This role involves sharing best practices for secure foundational cloud implementations, automating infrastructure and application provisioning, and designing cloud-ready application architectures. You will provide prescriptive guidance to ensure customers maximize the benefits of Google Cloud Platform (GCP) and deliver an exceptional experience as they migrate, build, modernize, and maintain applications on Google Cloud. Additionally, you will collaborate closely with Product Management and Engineering teams to drive improvements in Google Cloud products and features.

Job Responsibilities:

• Serve as a trusted advisor to customers, offering deep expertise in cloud security and tackling complex cloud security and compliance challenges.
• Partner with customers to design and implement secure cloud architectures and solutions that exceed their security requirements, through in-depth discussions, strategic recommendations, and hands-on implementation in Google Cloud.
• Develop and deliver best practices, tutorials, blog articles, sample code, and technical presentations tailored to different business and technical audiences.
• Communicate effectively via video conferencing for meetings, technical reviews, and onsite engagements.
• Manage senior stakeholders within customer environments to build consensus and drive successful outcomes on the Google Cloud platform.
• Stay current with industry trends and security best practices across various sectors.
• Travel regularly (up to 30%) within the region for meetings, technical reviews, and onsite engagements, with frequent use of video conferencing.

Job Requirement:

• Bachelor’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
• Proficiency in coding in one or more general-purpose programming languages.
• Experience managing customer projects to completion in collaboration with engineering teams, sales, and partners.
• Proven experience in architecting, developing, or maintaining secure cloud solutions.
• Excellent verbal and written communication skills in English and Mandarin Chinese, with the ability to create high-quality technical documentation and presentation materials.

Next Step

Prepare your updated resume and expected package.

Simply click on 'Apply here' or email to prasant.sirohi@adecco.com to drop your resume

All shortlisted candidates will be contacted.

Prasant Sirohi

EA License Number: 91C2918

Registration Number: R22106307

Location: Kallang Sector

1. Network security management (e.g. intrusion prevention system, virtual private network)
2. Web security management (e.g. URL filtering, web application firewall)
3. End point security management (e.g. anti-malware, device control, application control, data loss prevention or network access control)
4. Messaging security management (e.g. anti-malware, anti-spam, content filtering)
5. Security & vulnerability management (security information and event management, security device systems management, device and application vulnerability management)
6. Automation of management tasks

Interested applicants may email resume to cheryl.lee@recruitexpress.com.sg

Cheryl Lee Shi Le (CEI Registration No: R1434624)

Recruit Express Pte Ltd (EA: 99C4599)

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 1 to 4 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

Company Overview:

Traveloka is a leading technology company that provides a one-stop travel and lifestyle platform for customers in Southeast Asia. Our platform offers a wide range of travel-related services, including flight and hotel bookings, activities, attractions, and more. With a mission to empower travelers with seamless experiences, we're committed to pushing the boundaries of technology and innovation in the travel industry.

It's fun to work in a company where people truly BELIEVE in what they're doing!

Job Description:

As a leading travel technology company, Traveloka manages a vast ecosystem of APIs, microservices, cloud infrastructures, and front-end applications (web and mobile) that serve millions of users worldwide. On the back side, we operate large-scale data pipelines and internal business operations, many are engineered in-house, which require robust security measures to protect user data, intellectual property, and sensitive corporate information.

The Security Engineering Manager will take a holistic approach to safeguarding our engineering assets, working and managing across multiple teams including DevSecOps, Product Security, and Offensive Security. Success in this role requires strong analytical, problem-solving, and leadership abilities, as well as the capacity to think from defensive, offensive, and engineering perspectives to craft tailored security solutions for our unique environment. The ideal candidate will not only be proficient in using readily available or off-the-shelf tools but will also have the expertise to assess when and how custom security tools need to be developed and maintained with a software engineering perspective to address specific challenges.

Requirements:

• Proven experience managing Security Engineering or Software Engineering teams, with at least 7 years of extensive expertise in cybersecurity.
• Strong background in leading cybersecurity or software development projects using agile methodologies.
• Experience securing applications in fast-paced environments with frequent changes.
• Proficient in general-purpose programming languages (e.g., Python) and Object-Oriented Programming (e.g., Java).
• Hands-on experience with cloud platforms like AWS and GCP, including platform- specific security features and common security tools.
• Familiarity with modern technologies such as containerization, managed container services, serverless functions, infrastructure as code, API gateways, BFF (Backend for Frontend), CI/CD, and microservices.
• Deep technical knowledge of web, mobile, OS, and network security
• Able to practically demonstrate various security tests and control implementation such as SAST, DAST, SCA, WAF, secure-by-design, and secure application framework.
• Excellent verbal and written communication skills.
• Strong self-initiative to bridge gaps between Software Engineering, Infrastructure Engineering, and Security Engineering, while providing a security framework for the entire technology team and management.
• Commitment to cybersecurity with a dedication to continuous learning and staying updated on new technologies.
• Experience in CTF, bug bounty programs, presenting at security conferences, or publications is a plus.
• Experience with penetration testing, red teaming, or purple teaming is a plus.
• Web development experience or developing security tools is a plus.
• Relevant technical security certifications (e.g., Offensive Security, CREST, SANS GIAC) are a plus

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services,

and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you

could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems,

and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything

we create is the result of people in different roles and teams working together to make each other’s ideas

stronger. That same passion for innovation that goes into our products also applies to our practices,

strengthening our commitment to leave the world better than we found it.

Description

Apple is seeking a security professional to join its Information Security Response Organization, as part of the

Threat Analysis and Incident Response function. A successful candidate will possess a proven technical

background, relevant Information Security experience with a strong focus in the Incident Response lifecycle. You

will work with a global team of security professionals on a follow-the-sun model with a primary focus on the

identification, containment, and mitigation of security incidents. This role is an integral part of the security controls

Apple uses to protect its customers, brand, and data. This person will have the opportunity to work on technology

and processes with global reach. Apple is an Equal Opportunity Employer that is committed to inclusion and

diversity. We also take affirmative action to offer employment and advancement opportunities to all applicants,

including minorities, women, protected veterans, and individuals with disabilities. Apple will not discriminate or

retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job

application or interview process, to perform essential job functions, and to receive other benefits and privileges of

employment. Please contact us to request accommodation.

Minimum Qualifications

More than 7 years of experience in Information Security with a focus on Incident Response, Security

Engineering, and/or Intrusion Detection

Proficient understanding of incident response automation strategies, with demonstrated ability to implement

them

Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors

Knowledge of web application vulnerabilities with ability to triage/verify OWASP Top 10 issues

In-depth technical knowledge of macOS or Linux Operating Systems

Exceptional analytical and investigative skills with hands-on experience, with demonstrated ability to analyze

endpoint, network, and application logs

Proficient in one or more programming/scripting languages

Excellent verbal and written communication skills

Preferred Qualifications

Experience with disk and memory forensic tools

Experience writing and tuning IDS signatures

Experience triaging malware

• Network security management
• Web security management
• End point security management
• Messaging security management
• Security & vulnerability management
• Automation of management tasks

Requirements:

• Degree/Diploma in Computer-related disciplines
• At least 5 years of experience that covers management of enterprise security solution

Joy Yeow Zhi Qian

(CEI Registration No:R2096261)

Recruit Express Pte Ltd (EA Licence No: 99C4599)

Company’s Profile
Julian Grey’s client is a solution provider for security and enterprise applications.

Job Responsibilities

• Provide comprehensive security assessments for IT operations, ensuring the implementation of suitable security measures.
• Assist in the development and maintenance of security policies, addressing risks, and implementing measures to enhance system reliability and prevent unauthorized access.
• Collaborate with internal vulnerability assessment teams to analyze systems, identify vulnerabilities, assess risks, and determine protective measures through annual security assessments.
• Conduct information security and risk management awareness training programs.
• Investigate corporate infosec incidents, identify threats and their impact, and coordinate remediation efforts.
• Work with teams to achieve international accreditations such as ISO 27001, ISO 27017, ISO 27018, CREST, SOC2, and more.

Requirements

• Experience with enterprise information security and information risk management

Follow us for more updates, interview tips!
https://www.instagram.com/juliangreygroup/
https://www.linkedin.com/company/juliangreygroup/
https://www.facebook.com/juliangreygroup/
Our telegram channel for job opportunities - https://t.me/jobopportunitiessg

Please WA Jian Wei @ 87389860
Shortlisted candidates will be notified

Quek Jian Wei
Reg No. R22110928
Julian Grey Corporate Advisory Pte. Ltd.
EA License No: 19C9568

Cyber Security Infrastructure Engineer

Pay up to £38,373, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance.

This role within our Digital Security Transformation Programme is working in a security engineering team with an objective to improve the Department's Cyber Security posture across our estate of Digital Services, embedding security controls to ensuring we are secure by design.

DWP. Digital with Purpose.

We are looking for a Cyber Security Infrastructure Engineer to join our community of tech experts in DWP Digital.

We're using fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives.

DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people.

The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us.

What skills, knowledge and experience will you need?

• Ability to demonstrate an understanding of Software Delivery Methods: Knowledge of modern software delivery methods (e.g., DevOps, CI/CD) and how they can be applied within security practices, including experience with automation in the SDLC: Demonstrated experience with automating security processes, including the use of infrastructure as code and automated testing tools
• Proven ability to analyse security requirements and develop security cases compliant with legal and regulatory frameworks (e.g., GDPR, ISO 27001)
• Experience of writing clear, structured reports and delivering presentations tailored to both technical and non-technical audiences
• Hands-on experience conducting vulnerability assessments, prioritising remediation, and maintaining ongoing security with relevant tools and practices
• Security Frameworks and Standards: Familiarity with security frameworks such as the NIST Cybersecurity Framework, CIS Critical Security Controls, or similar
• Strong coding skills in developing and testing secure scripts or programs, ensuring system functionality and security in critical environments.

You and your role

As a Cyber Security Engineer, you will be responsible for embedding security into all stages of the Software Development Life Cycle (SDLC) in a large-scale, complex environment.

You will play a key role in maintaining the security of nearly 1 billion lines of code by implementing and maintaining modern software delivery practices, including automation and continuous integration/continuous delivery (CI/CD) pipelines, ensuring the development and deployment of secure, resilient software solutions.

Working collaboratively with development, operations, and security teams, you will design and implement security policies and controls that prevent vulnerabilities, ensuring alignment with industry best practices.

You will contribute to the enhancement of security processes and tooling that support the DevOps model, ensuring security is integrated at every step of the development cycle.

Details. Wages. Perks.

Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield whichever is most convenient for you.

Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub.

Pay: We offer competitive pay of up to £38,373.

Pension: You'll get a brilliant civil service pension with employer contributions worth 28.97%, worth over £10,000 per year.

Holidays: A generous leave package starting at 24 days rising to 31 days over time.

You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays.

We have a broad benefits package built around your work-life balance which includes:

• An award-winning environment and culture: Employer of the Year 2023 (Women In IT Awards), Founders Award for Outstanding Digital Leadership 2023 (Digital 100)
• Flexible working including flexible hours and flex-friendly policies
• Time off volunteering and charitable giving
• Bring your authentic self to work with 'I Can Be Me in DWP'
• Discounts and savings on shopping, fun days out and more
• Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference
• Professional development, coaching, mentoring and career progression opportunities.

Process:

We know your time is valuable, so our application and selection process are just two stages:

Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through.

Interview: a single stage interview online.

CLICK APPLY for more information and to start your application.

Proud member of the Disability Confident employer scheme

Cyber Security Infrastructure Engineer

Pay up to £38,373, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance.

This role within our Digital Security Transformation Programme is working in a security engineering team with an objective to improve the Department's Cyber Security posture across our estate of Digital Services, embedding security controls to ensuring we are secure by design.

DWP. Digital with Purpose.

We are looking for a Cyber Security Infrastructure Engineer to join our community of tech experts in DWP Digital.

We're using fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives.

DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people.

The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us.

What skills, knowledge and experience will you need?

• Ability to demonstrate an understanding of Software Delivery Methods: Knowledge of modern software delivery methods (e.g., DevOps, CI/CD) and how they can be applied within security practices, including experience with automation in the SDLC: Demonstrated experience with automating security processes, including the use of infrastructure as code and automated testing tools
• Proven ability to analyse security requirements and develop security cases compliant with legal and regulatory frameworks (e.g., GDPR, ISO 27001)
• Experience of writing clear, structured reports and delivering presentations tailored to both technical and non-technical audiences
• Hands-on experience conducting vulnerability assessments, prioritising remediation, and maintaining ongoing security with relevant tools and practices
• Security Frameworks and Standards: Familiarity with security frameworks such as the NIST Cybersecurity Framework, CIS Critical Security Controls, or similar
• Strong coding skills in developing and testing secure scripts or programs, ensuring system functionality and security in critical environments.

You and your role

As a Cyber Security Engineer, you will be responsible for embedding security into all stages of the Software Development Life Cycle (SDLC) in a large-scale, complex environment.

You will play a key role in maintaining the security of nearly 1 billion lines of code by implementing and maintaining modern software delivery practices, including automation and continuous integration/continuous delivery (CI/CD) pipelines, ensuring the development and deployment of secure, resilient software solutions.

Working collaboratively with development, operations, and security teams, you will design and implement security policies and controls that prevent vulnerabilities, ensuring alignment with industry best practices.

You will contribute to the enhancement of security processes and tooling that support the DevOps model, ensuring security is integrated at every step of the development cycle.

Details. Wages. Perks.

Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield whichever is most convenient for you.

Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub.

Pay: We offer competitive pay of up to £38,373.

Pension: You'll get a brilliant civil service pension with employer contributions worth 28.97%, worth over £10,000 per year.

Holidays: A generous leave package starting at 24 days rising to 31 days over time.

You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays.

We have a broad benefits package built around your work-life balance which includes:

• An award-winning environment and culture: Employer of the Year 2023 (Women In IT Awards), Founders Award for Outstanding Digital Leadership 2023 (Digital 100)
• Flexible working including flexible hours and flex-friendly policies
• Time off volunteering and charitable giving
• Bring your authentic self to work with 'I Can Be Me in DWP'
• Discounts and savings on shopping, fun days out and more
• Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference
• Professional development, coaching, mentoring and career progression opportunities.

Process:

We know your time is valuable, so our application and selection process are just two stages:

Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through.

Interview: a single stage interview online.

CLICK APPLY for more information and to start your application.

Proud member of the Disability Confident employer scheme