IT CYBERSECURITY ENGINEER

 

Custodia is a UK based company, founded in 2017, with wider presence in North America, Europe and Asia both directly and through strategic partnerships.

 

Our current key offering is the CC1 (Compliance Cloud One) service which records, stores and normalizes any type of communications data. This includes many common platforms such as phone email, SMS, phone calls, Microsoft Teams, WhatsApp and WeChat amongst many others. This allows companies to communicate in a compliant manner, whilst driving greater data-driven insights from the data they already have to store.

 

Due to wider market demands and as a fast moving, cloud-first SaaS company, Custodia is expanding into the capture, normalization and monitoring of data across many other regulated industries and verticals.

 

Custodia is a high-growth company with an energetic culture, and exciting, fast-paced work environment. We are partnering with some of the world’s leading companies to deliver CC1 to global companies across the finance, energy, healthcare, transportation, and other regulated industries.

​

 

​

THE ROLE

​

We are seeking a highly motivated and skilled IT Cybersecurity Engineer to join our team. In this critical role, you will play a pivotal role in protecting our organization's infrastructure, data, and applications from cyberattacks. You will leverage your deep understanding of operating systems, network protocols, and security frameworks to design, implement, and manage comprehensive security solutions.

​

​

 

RESPONSIBILITIES

​​

Safeguard the digital perimeter:

 

o Configure and manage firewalls, intrusion detection and prevention systems (IDPS), and SIEM solutions.

​

o Analyze security logs and events to detect and respond to potential threats.

​

o Investigate and mitigate security incidents effectively.

​

o Regularly evaluate potential threats and vulnerabilities to prioritize protection efforts.

​

Champion compliance and best practices:

​

o Implement and manage security frameworks like ISO 27001 and SOC 2.

​

o Drive adherence to ITIL-based Change and Release Management processes.

​

o Advocate for a culture of security awareness and best practices within the organization.

​

Implement robust security processes:

​

o Conduct threat modelling to identify and mitigate vulnerabilities.

​

o Implement secure coding practices and vulnerability management strategies.

​

o Design and deploy secure systems in accordance with industry best practices.

​

o Proactively research and analyse emerging cyber threats to adapt the organization's security posture.

​

Stay ahead of the curve:

​

o Maintain a deep understanding of evolving cyber threats and trends.

​

o Continuously learn and adapt to new technologies and security solutions.

​

o Actively participate in knowledge sharing and collaboration within the team.

​

​

​

QUALIFICATIONS

 

o Proven experience as an IT Cybersecurity Engineer or similar role.

​

o Strong understanding of operating system internals and network protocols.

​

o Familiarity with Azure and hands-on experience with Nessus vulnerability scanner.

​

o Incident investigation experience to effectively respond to and mitigate security incidents.

​

o Excellent communication skills to effectively interact with technical and non-technical audiences.

​

o Experience with Change and Release Management based on ITIL best practices.

​

o Project management skills for organizing, coordinating, and delivering security initiatives.

​

o Familiarity with firewall configuration and management.

​

o Expertise in identity and access management (IAM) solutions.

​

o Hands-on experience with IDPS.

​

o Experience with security frameworks like ISO 27001 and SOC 2.

​

o Experience in managing and configuring SIEM systems.

​

o Technical curiosity and an aptitude for swiftly learning and adapting to new technologies.

​

o Holding certifications like CISSP, CISA, or other relevant qualifications is a plus.

​

o Understanding of secure coding practices and vulnerability management.

​

o Experience conducting security code reviews and application assessments.

​

o Experience in secure architecture design and implementation of systems including Threat modelling.

​

​

This role is on-site, based at our office in Knutsford.

​