Security Engineer, Ocuco

• A relevant IT qualification
• Minimum of 3+ years of dedicated experience as a Security Engineer
• Proven experience with vulnerability management, incident response, and security architecture
• Strong experience with Azure security tools, networking, windows and cloud security
• Hands-on expertise with web application security tools and methodologies
• Experience with compliance frameworks such as ISO 27001 and SOC 2
• Relevant certifications such as CISSP, CEH, Azure Security Engineer Associate, CompTIA Security+, OSCP, or equivalent
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• Ability to work collaboratively in a fast-paced environment.

Desirable

• Ocuco Group is offering an exciting opportunity for a highly skilled and experienced Security Engineer to join the Data Security Team
• This individual will play a critical role in ensuring the security and resilience of our organization's infrastructure, applications, and data
• The primary focus of the role will be managing our vulnerability management and incident response systems while contributing to key security projects
• Own, manage and optimise Ocuco’s vulnerability management environments
• Conduct regular vulnerability scans, analyse results, and coordinate remediation with relevant teams
• Develop and maintain a process for prioritizing and addressing vulnerabilities based on risk
• Ensure continuous improvement and reduction in vulnerabilities across the business
• Own, manage and optimise Ocuco’s incident response systems
• Be the first-line responder to security incidents, perform root cause analysis, and recommend corrective actions
• Document incident response procedures and ensure the team is prepared for potential threats
• Ensure systems are up to date and configured correctly at all times
• Support and lead security initiatives, including but not limited to:
• Cloud and on-prem security architecture and hardening
• Windows-based security improvements.
• Network security assessments and improvements
• Web application security assessments and remediation
• Assist with security compliance efforts, including ISO 27001 and SOC 2 certifications
• Work closely with cross-functional teams, including IT, Development, DevOps and Data Team, to integrate security practices
• Stay up-to-date with the latest security trends, threats, and technologies