04 ago
|
Achilles Information
|
Madrid
04 ago
Achilles Information
Madrid
ppAs an IT Security Engineer, you will be responsible for protecting systems, networks and data from cyber threats and ensuring compliance with security standards. Identification of vulnerabilities, responding to security incidents and conducting regular assessments of the Achilles security posture. /p h3Results Responsibilities /h3 ul libThreat Monitorin /bg: Monitor network traffic for suspicious activity, detect and respond to potential threats, and provide recommendations for mitigation /li libSecurity Audit /bes: Conduct internal audits of Achilles teams to ensure ISO 27001, SOC 2 Type 2 and ENS requirements are met /li libFirewall and VPN Managemen /bt: Configure and manage firewalls, VPNs, and related network security devices to ensure optimal protection /li libCollaboratio /bn: Work with other IT teams to ensure security is embedded in infrastructure designs and processes /li libPatch Managemen /bt: Ensure timely updates and patches to network devices to mitigate vulnerabilities /li libDocumentatio /bn: Maintain detailed documentation of network configurations, security incidents, and changes made to systems /li /ul h3Information Security /h3 ul libCompliance and Audi /bts: Ensuring that the organisation complies with ISO 27001 requirements and other related standards. Preparing for internal and external audits /li libIncident Manageme /bnt: Handling security incidents and breaches, ensuring proper reporting and analysis. Ensuring that corrective actions from security incidents are implemented and that lessons learned are incorporated into future improvements /li libVendor and Thi /brd-Party Management: Ensuring that third-party vendors and service providers comply with the organisation’s security policies and ISO 27001, SOC 2 Type 2 and ENS requirements /li libContinuous Improveme /bnt: Monitoring the effectiveness of the ISMS and implementing improvements as needed /li libCollaborati /bon: Working closely with IT, legal, compliance, and other departments to ensure a unified approach to security. Collaborating on the integration of ISO 27001,
SOC 2 Type 2 and ENS requirements into broader IT or business processes /li /ul h3Personal Development /h3 ul liTaking personal responsibility for skills development, particularly to enhance security capabiliti /li liActively participating in the performance management process and taking responsibility for delivering agreed objectives /li /ul h3Relationships /h3 ul liManage and develop relationships with third party providers and internal stakeholders /li liBeing a security ‘go to person /li /ul h3PERSON SPECIFICATION /h3 h3Knowledge /h3 ul liUnderstanding of ISO 27001 principles, threat modelling, vulnerability assessments, and risk treatment methodologies /li liDeep understanding of network security principles (e.g., firewalls, VPNs, intrusion detection systems, SIEM), and network protocols /li liKnowledge of encryption methods, access control mechanisms, and endpoint security tools /li liKnowledge of compliance frameworks (ISO 27001, SOC 2, ENS, PCI DSS) and best practices /li liKnowledge and experience with securing cloud environments (Azure /li liKnowledge of network architectures /li /ul h3Experience /h3 ul liMinimum of 5 years of experience in IT Security, with a proven track record in a similar /li lirole. /li /ul h3Technical skills: /h3 ul liStrong understanding of network protocols, including TCP/IP, DNS, routing, and switching /li liExperience of security toolsets (Mimecast Portal and DMARC, Sophos Central, Qualys, Duo, Taegis XDR, Microsoft Entra ID, Copilot and InTune /li liStrong problem-solving and analytical skills /li liExcellent communication skills, both verbal and written /li liAbility to work both independently and collaboratively in a fast-paced environment /li /ul h3Preferred skills /h3 ul liExperience in conducting penetration testing and threat hunting /li liScripting experience (PowerShell)
for automation of security tasks /li /ul h3Qualifications /h3 ul liIT Diploma level or equivalent experience /li liCISSP, CEH, CCNA Security, or other relevant security certifications are highly desirableluent in English and Spanish, with the ability to communicate effectively in both written and spoken form /li /ul h3Decision /h3 ul liMakingIdentifies and evaluates the range of options open to them /li liArticulates the assumptions made and the risks involved in decisions taken /liliAnalyses information carefully to identify facts, patterns, trends and missing data that may impact on a decision /li liCommunicates decisions clearly to those who are affected /li /ul h3Achieving Results /h3 ul liFocuses on performance outcomes despite uncertain or difficult circumstances /li liActively links own efforts to those of others within the team to avoid overlap, rework or delays /li liSpots opportunities to deliver beyond expectations, where this would help others perform more effectively /li liSets own targets and objectives with clear reference to how these contribute to the departmental business plan /li /ul h3Managing Change /h3 ul liResponds constructively and quickly to shifting goalposts or changing requiments /li liCopes effectively with rapid change or increased demands /li liReprioritises own work or the work of the team in response to external pressures /li liIs adaptable in their approach; adapts their working style to suit the needs of the situation /li /ul h3Drive Motivation /h3 ul liAddresses multiple demands without losing focus or energy /li liIncreases efforts in the face of difficulties or obstacles and recovers quickly after setbacks /li liRemains calm and focused during stressful or challenging situations; concentrates only on things they can control or influence /li liEncourages others during challenging times with their positive, can-do attitude /li /ul h3Creative Capacity /h3 ul liUses initiative to resolve recurring problems in own role or team /li liTakes calculated risks to improve own performance /li liTries out new ways of working /li liAllocates time to identifying and resolving the root causes of problems /li /ul /p #J-18808-Ljbffr
📌 IT Security Engineer (Madrid)
🏢 Achilles Information
📍 Madrid