Information Security Engineer

About the role

The Information Security Engineer protects FTG's client environments across cloud, network and endpoint layers. You will detect and investigate threats, build and harden security infrastructure, turn threat intelligence into defences and support incident response for financial services and enterprise clients. The role suits someone comfortable analysing suspicious traffic as well as configuring firewalls or securing cloud workloads.

Key responsibilities

• Escalate confirmed incidents to the incident response team, notify clients and coordinate mitigation, and track incidents and service requests.
• Administer SIEM platforms, tune correlation rules and analyse logs from firewalls, IDS/IPS, domain controllers, network appliances, AV/antimalware and email gateways.
• Analyse TCP/IP traffic and event logs to find anomalies and indicators of compromise.
• Gather threat intelligence, turn it into detection rules and advisories, and stay current on TTPs and emerging threats.
• Implement and manage IDS/IPS, firewalls, VPNs and other network security products, and perform system hardening and vulnerability assessments.
• Support workloads on AWS, GCP and Azure, administer Linux servers and containers, and respond to endpoint detection alerts.
• Train and mentor L1 SOC analysts and work with Vulnerability Management and Incident Response teams.

Required profile

• Bachelor's degree in computer science, information security, IT or a related field.
• 2-4 years of hands-on experience in security operations, SOC analysis or network/infrastructure security.
• Understanding of incident, problem and change management processes.

Required skills

• Solid understanding of TCP/IP, firewalls, IDS/IPS, VPNs and common network protocols.
• Experience with at least one enterprise SIEM platform.
• Linux server administration and command-line troubleshooting.
• Familiarity with at least one major cloud platform; exposure to several is a plus.