The Security Engineer's primary responsibility is to configure and monitor security enforcing controls, both technical and procedural, perform administrative tasks on security monitoring applications, and ensure the effective operation of these tools in support of Appleby’s business objectives.

Under the guidance of the CISO, the Security Engineer will deliver required security operational activities and provide support to other IT teams. They will collaborate closely with team members to identify, recommend, develop, implement, and support cost-effective security improvements.

Principal Duties and Responsibilities

• Responsible for the proactive support and maintenance of protective monitoring tools, particularly SIEM and encryption solutions.
• Monitor security alerts and act as the first responder.
• Conduct threat-hunting activities to identify potential threats and targeted attacks.
• Investigate security incidents (e.g., suspicious emails, suspected breaches) and recommend remedial actions.
• Document and maintain security procedures and processes.
• Escalate security issues and incidents to the CISO.
• Serve as the initial point of contact for security incidents within the geographic location.
• Perform or assist with internal security audits.
• Conduct technical security assessments using defined tools (e.g., Nessus).
• Proactively communicate security initiatives and changes to users.
• Assist in maintaining the Risk Register and ensuring compliance with ISO 27001 standards.
• Support the completion of client security questionnaires.
• Deliver excellent customer service concerning security matters.
• Ensure adherence to Security Policies and Procedures at all times.
• Mentor and train junior team members to support their skills development and facilitate cross-site training.
• Collaborate with users to ensure security best practices are followed while meeting business objectives.
• Work closely with IT management to ensure security levels are maintained and risks are minimized.

Knowledge, Skills and Experience Required

• Excellent knowledge of Splunk and Vormetric/CipherTrust.
• Strong analytical and problem-solving skills.
• Exceptional interpersonal, written, and oral communication skills.
• A minimum of 5 years of security experience.
• Relevant industry qualifications and/or experience in current technologies.
• Experience working with security-enforcing products and controls.
• Working knowledge of ethical hacking tools and methodologies.
• Proven experience in log analysis and systematic analysis of interconnected systems.
• Strong knowledge of network technologies (e.g., LAN, WAN).
• Good understanding of Windows OS.
• Extensive knowledge of Azure and its security stack.
• Knowledge of firewalls and AI-based network monitoring tools.

Additional Competencies

• Proven analytical and problem-solving abilities.
• Skilled at working in a team-oriented, collaborative environment, with the ability to work independently when needed.
• Ability to present ideas clearly using business- and user-friendly language.
• Highly self-motivated with keen attention to detail.
• Strong customer service orientation.
• Demonstrated ability to align security practices with business objectives.
• Ability to effectively prioritize and execute tasks in high-pressure environments.
• Knowledge of physical security is advantageous.
• Extensive experience in team-oriented, collaborative, multi-jurisdictional environments.
• Energy and enthusiasm to contribute to the future growth and success of the Group.