We're looking for a Cyber Security Engineer to join our team responsible for implementing, managing and enhancing the technology underpinning N Brown's cyber security services.

You'll have a good understanding of a range of security tools like web application firewalls, intrusion detection technologies, vulnerability scanners and SIEM's; and the technical knowledge to integrate them to enhance our protection. You'll also need a good understanding of the native security tooling available in our cloud environments and will need to work with other engineering teams on their implementation. We're looking for someone who is pragmatic, with a good understanding of the risks to the business and practical ways to mitigate them, someone who can make the most of the tools available and solve problems creatively, and who keeps the needs of our internal customers at the forefront of everything they do.

What will you do as a Cyber Security Engineer at N Brown?

• To identify opportunities to improve efficiency in security processes through automation
• Onboarding and integrating AWS native security tools to enable detection and response to incidents, vulnerabilities, misconfigurations, etc in our AWS environments.
• Developing self-service security tools for N Brown's engineering teams
• To work with other operational departments to ensure that our cyber controls remain effective, fit-for-purpose and are performing optimally.
• Implementation of new security tooling
• To maintain security platforms and ensure they are operating effectively.
• support the wider Security team improve their efficiency through automation, and support incident response efforts when required.

• A proficient problem-solver that can work autonomously
• Knowledge of monitoring cloud environments using cloud native tooling.
• Experience in software delivery pipelines and automated deployments.
• An understanding of relevant security threats and controls to protect against them.
• Experience responding to incidents across corporate and customer-facing web applications, identifying potential threats and mitigating/escalating as required would be beneficial.
• Experience with SIEM Platforms (ideally Splunk), including working with logs and creating correlation searches and dashboards is a plus.
• Experience of working within PCI DSS, or other compliance frameworks.

• Coding languages (Python, Teraform)
• Build pipeline tools (Gitlab, Jenkins)
• IaaS (AWS, Azure, GCP)
• SIEM (ideally Splunk)
• Endpoint Detection and Response (EDR) tools such as MS Defender APT.
• Network and Host Intrusion Detection/Prevention tools
• Web Application Firewalls (ideally Akamai)
• Vulnerability scanning tools (ideally Rapid7)

• Hybrid working (2-3 days in the office at a minimum)
• 24 days holiday (+ 8 bank holidays)
• Annual bonus scheme
• Enhanced maternity and adoption leave
• Company pension with up to 8% N Brown contribution
• Mental Health support both internally and externally, including access to our wellbeing champions and counselling services
• A range of financial wellbeing support
• Colleague discount across all N Brown brands
• Onsite café with subsidised rates and local restaurant discounts!
• Life Assurance and Private Medical Insurance
• Paid volunteer time - all our colleagues can take a full day paid to volunteer for a charity of their choice