Total 1,002 Others production engineer job vacancies in Legal / Public / Security category in The United States of America

Key Responsibilities

Compliance;

1. Lead for arrangements for meeting regulatory obligations in accordance with the conditions issued by the relevant regulatory (ISO, CQM, Issuers Audit, Others Scheme).
2. Provide closures and complete audit work papers and documentation by documenting audit tests and findings.
3. Identifying/Anticipating and/or managing all audit issues otherwise likely to cause an adverse effect to the division.
4. Investigation of all irregularities which are normally those issues threatening the integrity of delivery, assessment and awarding systems for qualifications including adverse effects, and cases of malpractice and maladministration.
5. Ensure timely notification and reporting to the Responsible Engineer.
6. To support and advise all department managers in all issues relating to audit, quality and compliance.
7. Managing those internal audits as may be agreed with the Responsible Engineer and Directors.
8. Governance the Internal Audit Procedure
9. Governance the Risk Assessment Procedure
10. Governance the Incident Report Procedure
11. Governance the Problem Management Procedure

Process Improvement;

1. Lead new process implementation in operation side.
2. Implement statistical process analysis on new and existing products.
3. Process SPC/Yield improvement.
4. Identify, quantify, analyse and develop improvement plans and modifications in area(s) of responsibility.

Job Requirements

1. At least 1 years’ experience in Compliance
2. 1 years of compliance management experience but case-to-case basis depending on relevant working experience.
3. Planning skills and organization skills to be able run and monitor the production process, e.g., Control Chart, Pareto Chart, etc.
4. ICT literacy to deal with various technologies and programs and intermediate computer knowledge and usage in MS Office (Word, Excel, PowerPoint).
5. Attention to detail to ensure high levels of quality.
6. Ability to communicate clearly and persuasively with your team, managers and clients;
7. Ability to work under pressure and motivate others to meet tight deadlines
8. Ability to work in a logical, systematic manner.
9. Interpersonal communication skills, presentation Skills.
10. Audit skills and knowledge will be an added advantage.
11. A fast learner and must have self-initiative to learn.

Perks & Benefits

• Central location
• Casual dress code
• Medical insurance

主要職責

遵守;

1. 根據相關監理機關（ISO、CQM、發行人審計、其他計畫）發布的條件，領導安排履行監理義務。
2. 透過記錄審計測試和結果，提供結案並完成審計工作底稿和文件。
3. 識別/預測和/或管理所有審計問題，否則可能會對部門造成不利影響。
4. 調查所有違規行為，通常是威脅資格交付、評估和授予系統完整性的問題，包括不利影響以及瀆職和管理不善案件。
5. 確保及時通知並報告給負責工程師。
6. 就與審計、品質和合規性相關的所有問題為所有部門經理提供支援和建議。
7. 根據負責工程師和董事的同意，管理這些內部審計。
8. 治理內部稽核程序
9. 風險評估程序的治理
10. 治理事件通報程序
11. 治理問題管理程序

流程改善；

1. 主導營運端新流程的實施。
2. 對新產品和現有產品實施統計流程分析。
3. 流程 SPC/良率改進。
4. 識別、量化、分析和製定責任領域的改進計劃和修改。

職位要求

1. 至少 1 年合規經驗
2. 1年合規管理經驗，但具體情況視相關工作經驗而定。
3. 能夠運作和監控生產流程的規劃技能和組織技能，例如控製圖、帕累托圖等。
4. 處理各種技術和程序的 ICT 素養以及 MS Office（Word、Excel、PowerPoint）中的中級電腦知識和使用。
5. 注重細節，確保高水準的品質。
6. 能夠與您的團隊、經理和客戶進行清晰且有說服力的溝通；
7. 能夠在壓力下工作並激勵他人在緊迫的期限內完成工作
8. 能夠以邏輯、系統化的方式運作。
9. 人際溝通技巧、表達技巧。
10. 審計技能和知識將是一個額外的優勢。
11. 一個快速學習者必須有主動學習的能力。

津貼和福利

• 中心位置
• 休閒著裝要求
• 醫療保險

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 1 to 4 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

Cyber Security Infrastructure Engineer

Pay up to £38,373, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance.

This role within our Digital Security Transformation Programme is working in a security engineering team with an objective to improve the Department's Cyber Security posture across our estate of Digital Services, embedding security controls to ensuring we are secure by design.

DWP. Digital with Purpose.

We are looking for a Cyber Security Infrastructure Engineer to join our community of tech experts in DWP Digital.

We're using fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives.

DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people.

The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us.

What skills, knowledge and experience will you need?

• Ability to demonstrate an understanding of Software Delivery Methods: Knowledge of modern software delivery methods (e.g., DevOps, CI/CD) and how they can be applied within security practices, including experience with automation in the SDLC: Demonstrated experience with automating security processes, including the use of infrastructure as code and automated testing tools
• Proven ability to analyse security requirements and develop security cases compliant with legal and regulatory frameworks (e.g., GDPR, ISO 27001)
• Experience of writing clear, structured reports and delivering presentations tailored to both technical and non-technical audiences
• Hands-on experience conducting vulnerability assessments, prioritising remediation, and maintaining ongoing security with relevant tools and practices
• Security Frameworks and Standards: Familiarity with security frameworks such as the NIST Cybersecurity Framework, CIS Critical Security Controls, or similar
• Strong coding skills in developing and testing secure scripts or programs, ensuring system functionality and security in critical environments.

You and your role

As a Cyber Security Engineer, you will be responsible for embedding security into all stages of the Software Development Life Cycle (SDLC) in a large-scale, complex environment.

You will play a key role in maintaining the security of nearly 1 billion lines of code by implementing and maintaining modern software delivery practices, including automation and continuous integration/continuous delivery (CI/CD) pipelines, ensuring the development and deployment of secure, resilient software solutions.

Working collaboratively with development, operations, and security teams, you will design and implement security policies and controls that prevent vulnerabilities, ensuring alignment with industry best practices.

You will contribute to the enhancement of security processes and tooling that support the DevOps model, ensuring security is integrated at every step of the development cycle.

Details. Wages. Perks.

Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield whichever is most convenient for you.

Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub.

Pay: We offer competitive pay of up to £38,373.

Pension: You'll get a brilliant civil service pension with employer contributions worth 28.97%, worth over £10,000 per year.

Holidays: A generous leave package starting at 24 days rising to 31 days over time.

You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays.

We have a broad benefits package built around your work-life balance which includes:

• An award-winning environment and culture: Employer of the Year 2023 (Women In IT Awards), Founders Award for Outstanding Digital Leadership 2023 (Digital 100)
• Flexible working including flexible hours and flex-friendly policies
• Time off volunteering and charitable giving
• Bring your authentic self to work with 'I Can Be Me in DWP'
• Discounts and savings on shopping, fun days out and more
• Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference
• Professional development, coaching, mentoring and career progression opportunities.

Process:

We know your time is valuable, so our application and selection process are just two stages:

Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through.

Interview: a single stage interview online.

CLICK APPLY for more information and to start your application.

Proud member of the Disability Confident employer scheme

Cyber Security Infrastructure Engineer

Pay up to £38,373, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance.

This role within our Digital Security Transformation Programme is working in a security engineering team with an objective to improve the Department's Cyber Security posture across our estate of Digital Services, embedding security controls to ensuring we are secure by design.

DWP. Digital with Purpose.

We are looking for a Cyber Security Infrastructure Engineer to join our community of tech experts in DWP Digital.

We're using fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives.

DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people.

The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us.

What skills, knowledge and experience will you need?

• Ability to demonstrate an understanding of Software Delivery Methods: Knowledge of modern software delivery methods (e.g., DevOps, CI/CD) and how they can be applied within security practices, including experience with automation in the SDLC: Demonstrated experience with automating security processes, including the use of infrastructure as code and automated testing tools
• Proven ability to analyse security requirements and develop security cases compliant with legal and regulatory frameworks (e.g., GDPR, ISO 27001)
• Experience of writing clear, structured reports and delivering presentations tailored to both technical and non-technical audiences
• Hands-on experience conducting vulnerability assessments, prioritising remediation, and maintaining ongoing security with relevant tools and practices
• Security Frameworks and Standards: Familiarity with security frameworks such as the NIST Cybersecurity Framework, CIS Critical Security Controls, or similar
• Strong coding skills in developing and testing secure scripts or programs, ensuring system functionality and security in critical environments.

You and your role

As a Cyber Security Engineer, you will be responsible for embedding security into all stages of the Software Development Life Cycle (SDLC) in a large-scale, complex environment.

You will play a key role in maintaining the security of nearly 1 billion lines of code by implementing and maintaining modern software delivery practices, including automation and continuous integration/continuous delivery (CI/CD) pipelines, ensuring the development and deployment of secure, resilient software solutions.

Working collaboratively with development, operations, and security teams, you will design and implement security policies and controls that prevent vulnerabilities, ensuring alignment with industry best practices.

You will contribute to the enhancement of security processes and tooling that support the DevOps model, ensuring security is integrated at every step of the development cycle.

Details. Wages. Perks.

Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield whichever is most convenient for you.

Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub.

Pay: We offer competitive pay of up to £38,373.

Pension: You'll get a brilliant civil service pension with employer contributions worth 28.97%, worth over £10,000 per year.

Holidays: A generous leave package starting at 24 days rising to 31 days over time.

You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays.

We have a broad benefits package built around your work-life balance which includes:

• An award-winning environment and culture: Employer of the Year 2023 (Women In IT Awards), Founders Award for Outstanding Digital Leadership 2023 (Digital 100)
• Flexible working including flexible hours and flex-friendly policies
• Time off volunteering and charitable giving
• Bring your authentic self to work with 'I Can Be Me in DWP'
• Discounts and savings on shopping, fun days out and more
• Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference
• Professional development, coaching, mentoring and career progression opportunities.

Process:

We know your time is valuable, so our application and selection process are just two stages:

Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through.

Interview: a single stage interview online.

CLICK APPLY for more information and to start your application.

Proud member of the Disability Confident employer scheme

About The Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role:

• We are seeking security engineers who are excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• Our team covers line one control ownership of multiple domains, including cloud, DevSecOps, privileged access management, runtime, containers, kubernetes, cryptography, SaaS security and automated response.
• You will work on a public cloud security program with an aim of real-time vulnerability identification and automatic remediation.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source kubernetes admission controllers (Kyverno) and build tools that automate our security posture.

The day-to-day activities:

• Design and implement cutting edge preventative and detective controls
• Shift security left in the engineering life-cycle by implementing commercial, security tools and scanners.
• Collaborate with experienced security engineers and engineering squad leads to research and build solutions geared towards identifying security issues at scale
• Evaluate/extend/contribute to existing open-source security tools and integrate them into pipelines.
• Constantly evaluate our progress and work on solutions to raise our security bar at scale. You understand that security is a continuous, ever evolving process.
• Design and implement cutting edge security tools and scanners, including static application security testing (SAST) and dynamic application security testing (DAST).
• Design and implement an automated security scanning solution for cloud infrastructure as code, experience using Sentinel policies for Terraform is preferred.

The must-haves:

• An understanding of public cloud security and cloud native security services is a plus
• An understanding of common global and industry standard control frameworks (CIS, NIST800-53, PCI-DSS)
• Should have relevant experience of 4 to 5 years
• Experience with scripting/programming security automation. While you do not need to be a full time programmer, we do strive for automation and are required to glue a lot of our processes together. Go, Python, etc.
• Experience with container platforms and frameworks is preferred (AWS EKS, Docker, Kubernetes, Admission Controllers, Kyverno).

Job Description

• Oversee day-to-day PKI operations, including the issuance, renewal, and revocation of digital certificates.
• Manage certificate lifecycle in both enterprise and cloud environments.
• Monitor and maintain certificate authorities (CA) and related infrastructure, ensuring high availability and security.
• Implement best practices for secure key management, including key rotation, backup, and recovery processes.
• Support cryptographic hardware devices, such as HSMs (Hardware Security Modules), ensuring proper configuration and compliance.
• Identify and resolve issues related to PKI infrastructure, certificates, and cryptographic hardware.
• Provide Level 1/2 support for PKI-related incidents and requests.
• Document troubleshooting steps and resolutions to improve future responses.
• Ensure PKI operations align with industry standards and regulatory requirements.
• Conduct regular audits of PKI systems and assist with compliance reporting.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).

Experience:

• Minimum of 3 years in IT with a focus on systems administration, networking, or cybersecurity.
• At least 2 years of hands-on experience with PKI or certificate operations
• Strong understanding of PKI concepts, protocols (e.g., TLS/SSL, x.509), and standards (e.g., FIPS, NIST).
• Familiarity with certificate management tools and software.
• Experience with scripting languages (e.g., PowerShell, Python) is a plus.
• Excellent problem-solving skills and attention to detail.
• Effective communication skills to interact with technical and non-technical stakeholders.

Position:Mobile Fire & Security Engineer

Location: Belfast

Salary: 36000-38000

Shift Pattern : 39 hours per week, Overtime:- 1.5x Monday to Friday (Evenings) & Saturday (1st half) 2x Saturday (2nd half) & Sunday, On-Call (Allowance) - approx 1⁄5 - £150 standby

Job Purpose:

To carry out Planned Preventative Maintenance (PPM), Reactive Maintenance and extra works/emergencies in accordance with the contract requirements on Fire & Security Systems.

Key Responsibilities:

* To carry out PPM in accordance with set schedules, ensuring engineering standards are maintained in order to maximise the operational effectiveness and reliability of the Fire & Security Systems.

* Adherence to set engineering standards in accordance with Health and Safety at Work Act (HASAWA) requirements.

* To ensure onsite Quality Assurance procedures are adhered to in all respects and to maintain accurate records/documentation associated with the Fire & Security Systems.

* To respond in a prompt and effective manner to all relevant reactive maintenance issues, and help desk requests. * To coordinate initial actions associated with all requests from the client.

* To coordinate visiting specialist subcontractors associated with Fire & Security Systems aspects of the PPM schedules.

* To respond to callouts and cover breakdowns and emergencies associated with the contract as required. * Fault diagnosis associated with the PPM or Reactive maintenance of the site.

* Assist other trades as necessary.

* Manage workload and prioritize jobs appropriately

* To provide reports in relation to work and equipment as required.

* To undertake miscellaneous duties as requested by the Client.

* To proactively work towards the growth of the contract into other service provisions be they System Upgrades, Like for Like replacements, Project works, etc

Health & Safety:

All staff are required to fulfil their legal duty to take reasonable care for the health and safety of themselves and others who may be affected by their acts and omissions, and to follow all guidance and instructions given in this respect. Further details regarding Health & Safety responsibilities are set out in the Health & Safety Policy.

Qualifications & Experiences

The knowledge, skills, qualifications and experience relevant to the position are:

Essential

* Fire & Security Apprenticeship (or recognised equivalent)

* Health and Safety Training

* GCSE (or 'O' Level equivalent) passes in Maths and English or recognised equivalent

* Industry experience with similar maintenance duties including fault diagnosis, rectification and preventative tasks * The candidate must be fully experienced in fire alarms and have the certification to evidence this * Must have experience in IP and analogue CCTV

* Must be IPAF trained and have a valid Chapter 8 ECS card

Desirable

* City & Guilds Part 3 (Electrical Installation 2360) or recognised equivalent

* Experience in IT & Networking

* Supervisory experience for future development

Benefits

• 25 days annual leave, plus 8 bank holidays & a day off for your birthday!

• Van + Fuel Card

• Private healthcare, Life insurance, Pension plan, Employee rewards and discounts & EDF Energy staff discount

• Up to £38k depending on experience (interview is salary graded)

Randstad CPE values diversity and promotes equality. No terminology in this advert is intended to discriminate against any of the protected characteristics that fall under the Equality Act 2010. We encourage and welcome applications from all sections of society and are more than happy to discuss reasonable adjustments and/or additional arrangements as required to support your application.

Candidates must be eligible to live and work in the UK.

For the purposes of the Conduct Regulations 2003, when advertising permanent vacancies we are acting as an Employment Agency, and when advertising temporary/contract vacancies we are acting as an Employment Business.

Responsibilities:

- Design and implement integration solutions for various physical security systems, including access control, video surveillance, intrusion detection, video analytics and alarm systems

- Ability to understand and address customer requirements and translate them into technical solutions

- Collaborate with product teams to address specific customer needs and feedback

- Design and propose security technology solutions tailored to different verticals

- Collaborate with cross-functional teams to gather requirements and define project scope

- Conduct site surveys and assessments to determine integration needs and best practices

- Conduct POC, demo, testing and setup of security system and video analytics

- Manage and execute projects with strong project management skills

- Develop documentation, including system specifications, integration plans, and user manuals

- Stay updated on industry trends, technologies, and best practices related to physical security

Requirements:

- Bachelor’s degree in Computer Science, Engineering, or a related subject

- Programming skills in Python, C++ and/or Javascript

- Fullstack experience is strongly preferred

- Strong understanding of networking, database management, and software integration

- Familiarity with industry standards and protocols (e.g., ONVIF, BACnet, etc.)

Nice to have:

- Professional experience working with VMS systems and integrating 3rd party solutions

- B2B (Business-to-Business) experience in physical security

- Technical security system certifications (I.e., Gallagher, Genetec, BICSI, Milestone) and/or related IT (i.e., CCNA) certifications preferred

- Possess market knowledge in physical security industry for verticals ie. transportation, commercial building, hospitality, etc.

Position:Mobile Fire & Security Engineer

Location: Belfast

Salary: 36000-38000

Shift Pattern : 39 hours per week, Overtime:- 1.5x Monday to Friday (Evenings) & Saturday (1st half) 2x Saturday (2nd half) & Sunday, On-Call (Allowance) - approx 1⁄5 - £150 standby

Job Purpose:

To carry out Planned Preventative Maintenance (PPM), Reactive Maintenance and extra works/emergencies in accordance with the contract requirements on Fire & Security Systems.

Key Responsibilities:

* To carry out PPM in accordance with set schedules, ensuring engineering standards are maintained in order to maximise the operational effectiveness and reliability of the Fire & Security Systems.

* Adherence to set engineering standards in accordance with Health and Safety at Work Act (HASAWA) requirements.

* To ensure onsite Quality Assurance procedures are adhered to in all respects and to maintain accurate records/documentation associated with the Fire & Security Systems.

* To respond in a prompt and effective manner to all relevant reactive maintenance issues, and help desk requests. * To coordinate initial actions associated with all requests from the client.

* To coordinate visiting specialist subcontractors associated with Fire & Security Systems aspects of the PPM schedules.

* To respond to callouts and cover breakdowns and emergencies associated with the contract as required. * Fault diagnosis associated with the PPM or Reactive maintenance of the site.

* Assist other trades as necessary.

* Manage workload and prioritize jobs appropriately

* To provide reports in relation to work and equipment as required.

* To undertake miscellaneous duties as requested by the Client.

* To proactively work towards the growth of the contract into other service provisions be they System Upgrades, Like for Like replacements, Project works, etc

Health & Safety:

All staff are required to fulfil their legal duty to take reasonable care for the health and safety of themselves and others who may be affected by their acts and omissions, and to follow all guidance and instructions given in this respect. Further details regarding Health & Safety responsibilities are set out in the Health & Safety Policy.

Qualifications & Experiences

The knowledge, skills, qualifications and experience relevant to the position are:

Essential

* Fire & Security Apprenticeship (or recognised equivalent)

* Health and Safety Training

* GCSE (or 'O' Level equivalent) passes in Maths and English or recognised equivalent

* Industry experience with similar maintenance duties including fault diagnosis, rectification and preventative tasks * The candidate must be fully experienced in fire alarms and have the certification to evidence this * Must have experience in IP and analogue CCTV

* Must be IPAF trained and have a valid Chapter 8 ECS card

Desirable

* City & Guilds Part 3 (Electrical Installation 2360) or recognised equivalent

* Experience in IT & Networking

* Supervisory experience for future development

Benefits

• 25 days annual leave, plus 8 bank holidays & a day off for your birthday!

• Van + Fuel Card

• Private healthcare, Life insurance, Pension plan, Employee rewards and discounts & EDF Energy staff discount

• Up to £38k depending on experience (interview is salary graded)

Randstad CPE values diversity and promotes equality. No terminology in this advert is intended to discriminate against any of the protected characteristics that fall under the Equality Act 2010. We encourage and welcome applications from all sections of society and are more than happy to discuss reasonable adjustments and/or additional arrangements as required to support your application.

Candidates must be eligible to live and work in the UK.

For the purposes of the Conduct Regulations 2003, when advertising permanent vacancies we are acting as an Employment Agency, and when advertising temporary/contract vacancies we are acting as an Employment Business.

Cyber Security Infrastructure Engineer

Pay up to £38,373, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance.

This role within our Digital Security Transformation Programme is working in a security engineering team with an objective to improve the Department's Cyber Security posture across our estate of Digital Services, embedding security controls to ensuring we are secure by design.

DWP. Digital with Purpose.

We are looking for a Cyber Security Infrastructure Engineer to join our community of tech experts in DWP Digital.

We're using fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives.

DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people.

The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us.

What skills, knowledge and experience will you need?

• Ability to demonstrate an understanding of Software Delivery Methods: Knowledge of modern software delivery methods (e.g., DevOps, CI/CD) and how they can be applied within security practices, including experience with automation in the SDLC: Demonstrated experience with automating security processes, including the use of infrastructure as code and automated testing tools
• Proven ability to analyse security requirements and develop security cases compliant with legal and regulatory frameworks (e.g., GDPR, ISO 27001)
• Experience of writing clear, structured reports and delivering presentations tailored to both technical and non-technical audiences
• Hands-on experience conducting vulnerability assessments, prioritising remediation, and maintaining ongoing security with relevant tools and practices
• Security Frameworks and Standards: Familiarity with security frameworks such as the NIST Cybersecurity Framework, CIS Critical Security Controls, or similar
• Strong coding skills in developing and testing secure scripts or programs, ensuring system functionality and security in critical environments.

You and your role

As a Cyber Security Engineer, you will be responsible for embedding security into all stages of the Software Development Life Cycle (SDLC) in a large-scale, complex environment.

You will play a key role in maintaining the security of nearly 1 billion lines of code by implementing and maintaining modern software delivery practices, including automation and continuous integration/continuous delivery (CI/CD) pipelines, ensuring the development and deployment of secure, resilient software solutions.

Working collaboratively with development, operations, and security teams, you will design and implement security policies and controls that prevent vulnerabilities, ensuring alignment with industry best practices.

You will contribute to the enhancement of security processes and tooling that support the DevOps model, ensuring security is integrated at every step of the development cycle.

Details. Wages. Perks.

Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield whichever is most convenient for you.

Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub.

Pay: We offer competitive pay of up to £38,373.

Pension: You'll get a brilliant civil service pension with employer contributions worth 28.97%, worth over £10,000 per year.

Holidays: A generous leave package starting at 24 days rising to 31 days over time.

You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays.

We have a broad benefits package built around your work-life balance which includes:

• An award-winning environment and culture: Employer of the Year 2023 (Women In IT Awards), Founders Award for Outstanding Digital Leadership 2023 (Digital 100)
• Flexible working including flexible hours and flex-friendly policies
• Time off volunteering and charitable giving
• Bring your authentic self to work with 'I Can Be Me in DWP'
• Discounts and savings on shopping, fun days out and more
• Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference
• Professional development, coaching, mentoring and career progression opportunities.

Process:

We know your time is valuable, so our application and selection process are just two stages:

Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through.

Interview: a single stage interview online.

CLICK APPLY for more information and to start your application.

Proud member of the Disability Confident employer scheme

Cyber Security Infrastructure Engineer

Pay up to £38,373, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance.

This role within our Digital Security Transformation Programme is working in a security engineering team with an objective to improve the Department's Cyber Security posture across our estate of Digital Services, embedding security controls to ensuring we are secure by design.

DWP. Digital with Purpose.

We are looking for a Cyber Security Infrastructure Engineer to join our community of tech experts in DWP Digital.

We're using fresh ideas and leading-edge tech to build and maintain digital solutions that will be used by nearly every person in the UK, every day and at key moments in their lives.

DWP is the UK's largest government department. We help people into work and make payments worth over £195bn a year to support and empower millions of people.

The scale of what we do is extraordinary, and our purpose is unique. We'd love you to join us.

What skills, knowledge and experience will you need?

• Ability to demonstrate an understanding of Software Delivery Methods: Knowledge of modern software delivery methods (e.g., DevOps, CI/CD) and how they can be applied within security practices, including experience with automation in the SDLC: Demonstrated experience with automating security processes, including the use of infrastructure as code and automated testing tools
• Proven ability to analyse security requirements and develop security cases compliant with legal and regulatory frameworks (e.g., GDPR, ISO 27001)
• Experience of writing clear, structured reports and delivering presentations tailored to both technical and non-technical audiences
• Hands-on experience conducting vulnerability assessments, prioritising remediation, and maintaining ongoing security with relevant tools and practices
• Security Frameworks and Standards: Familiarity with security frameworks such as the NIST Cybersecurity Framework, CIS Critical Security Controls, or similar
• Strong coding skills in developing and testing secure scripts or programs, ensuring system functionality and security in critical environments.

You and your role

As a Cyber Security Engineer, you will be responsible for embedding security into all stages of the Software Development Life Cycle (SDLC) in a large-scale, complex environment.

You will play a key role in maintaining the security of nearly 1 billion lines of code by implementing and maintaining modern software delivery practices, including automation and continuous integration/continuous delivery (CI/CD) pipelines, ensuring the development and deployment of secure, resilient software solutions.

Working collaboratively with development, operations, and security teams, you will design and implement security policies and controls that prevent vulnerabilities, ensuring alignment with industry best practices.

You will contribute to the enhancement of security processes and tooling that support the DevOps model, ensuring security is integrated at every step of the development cycle.

Details. Wages. Perks.

Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield whichever is most convenient for you.

Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub.

Pay: We offer competitive pay of up to £38,373.

Pension: You'll get a brilliant civil service pension with employer contributions worth 28.97%, worth over £10,000 per year.

Holidays: A generous leave package starting at 24 days rising to 31 days over time.

You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays.

We have a broad benefits package built around your work-life balance which includes:

• An award-winning environment and culture: Employer of the Year 2023 (Women In IT Awards), Founders Award for Outstanding Digital Leadership 2023 (Digital 100)
• Flexible working including flexible hours and flex-friendly policies
• Time off volunteering and charitable giving
• Bring your authentic self to work with 'I Can Be Me in DWP'
• Discounts and savings on shopping, fun days out and more
• Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference
• Professional development, coaching, mentoring and career progression opportunities.

Process:

We know your time is valuable, so our application and selection process are just two stages:

Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through.

Interview: a single stage interview online.

CLICK APPLY for more information and to start your application.

Proud member of the Disability Confident employer scheme

About the Team

We are the bank's security engineering team - our mission is simple - we make sure that we build and leverage secure systems and operate them at production scale in a secure way. Our engineering teams move fast and are constantly innovating, and our security engineers need to ensure we provide the right tools and processes to help them move at high velocity.

We are a builder function, we build tools and processes that bring to life the banks security standards and policies. We use security metrics to make continuous improvements to security controls and culture. We strive for automation and love Jira tickets. What is not measured, can not be improved.

Get to know the Role (Lead Security Engineer):

• We are seeking a lead security engineer who can drive security strategy and initiatives from 0 to 1. This could be across a wide range of domains covering identity, application security, cloud, DevSecOps, or detection engineering. We are open to security engineers with deep skills in one or more of these domains.
• You will have excellent stakeholder management skills, and are able to operate and influence across the business.
• You should be excited about shaping the future of information security by building security tools to identify and eradicate vulnerabilities across all stages of the software development lifecycle.
• You will work with public cloud, terraform, commercial cloud posture security management tools, open-source and build tools that automate our security posture.

The day-to-day activities:

• Work with the wider security engineering team to take security requirements and build scalable applications and solutions that automate security and reduce the risk of the bank.
• Own the strategy for assigned security domains, consisting of tactical initiatives and strategic multi-year decisions.
• Partner with teams across the bank including SRE, Data Engineering, GenAI and Product to identify areas of security posture improvement, create the plan and execute.
• Maintain standards and procedures inline with regulatory and internal policy requirements.
• Lead engagements with internal and external audits that are applicable to first line technology.
• Mentor junior engineers to uplift their ability across security domains, increasing the teams knowledge and standard operating procedures.

The must-haves:

• Should have relevant experience of 8+ years within information security
• Experience with scripting/programming security automation.
• Knowledge of cloud platforms (AWS, Serverless, managed services, containers, etc)
• Excellent soft skills - able to handle pressure in a fast-paced environment. Open-minded, creative and innovative.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• In-depth knowledge of security frameworks, standards, and best practices.
• Proficiency in security technologies (e.g., SIEM, IDS/IPS, firewalls, endpoint protection).
• Strong understanding of network protocols, operating systems, and application security.
• Excellent problem-solving, analytical, and decision-making skills.
• Strong leadership, communication, and collaboration abilities.
• Ability to manage multiple projects and priorities in a fast-paced environment.