Security Engineer (Endpoint Security) - Welwyn Garden City

Tesco's Technology department is now seeking aEndpoint Security Engineer to join the team!

About the Security & Capability Team

Our team is responsible for providing and maintaining tools used by Tesco in order to monitor and secure our systems, while also helping our colleagues globally.

We maintain global hybrid instances of our chosen tools for SIEM, Application Performance Monitoring, Log Monitoring, Backlog Management, Identity Access Management, Service Desk, self-help portals for colleagues and incident communications. In addition to the challenges delivering this capability brings, were also the team responsible for the security operations centre and our security architecture, working across Tesco globally to secure our systems and data! Our Technology Risk & Compliance team works tirelessly to further develop a risk aware culture and drive audit and regulatory improvements across the technology team in all Tesco countries.

We aim to provide colleagues with a great experience by providing world class tooling, processes and advice. We believe in solutions that are either self-service or invisible to the end user thats not always easy to achieve, but its what we strive for.

Responsibilities

An Endpoint Security Engineer is responsible for delivering security capabilities for the organisation. This will include researching, engineering, implementing and operating enterprise endpoint security products, with key areas focusing on preventing malware and the loss of data.

This will involve managing and improving endpoint security compliance, through automation, monitoring and alerting, SIEM integration, development and implementation of standards, procedures, and guidelines covering different platforms and devices.

• Follow our Business Code of Conduct always acting with integrity and due diligence.
• Represent the Technology Security team and assist other teams to investigate security incidents.
• Work closely and collaboratively with security, infrastructure and engineering teams.
• Collaborate closely with colleagues within the wider global Technology organisation and the business to establish effective and productive relationships.
• Involvement in and leading of security incidents which occur on Tesco systems.
• Drive improvements for use cases for the security operations team
• Drive adoption of new tools and techniques being able to understand their value and impact.
• Keep technical skills up to date and keep track of new technologies, understanding how they might benefit the team.
• Share knowledge with the wider security community.
• Champion continuous improvement within the department.

This role will best suit an individual who enjoys working as part of a team, is well organised, pragmatic and a lateral thinker with an inquisitive mind who is motivated to make change for the better and, most importantly, puts our customers first.

Key Skills and Experience

You'll need to have demonstrated experience of working with enterprise endpoint security platforms:

• A good understanding of information and cyber security principles and best practices.
• A strong understanding of endpoint security controls.
• An understanding of Windows and Unix internals.
• Experience of working with enterprise endpoint security platforms (AV / anti-malware, EDR, DLP).
• Experience of working with Microsoft, Sophos and Symantec endpoint security products would be an advantage, but is not essential.
• Ability to pick up new products and platforms quickly, transferring skills and best practices when needed.
• Willing to join an on call rota and work outside of normal business hours when occasionally required.
• One or more of the following certifications would be advantageous:
• CompTIA Security+
• SANS GIAC
• SSCP
• CISSP
• CSSLP
• CISA
• CISM