Security Engineer Porto

Security Engineer
Porto
Porto, Porto District, Portugal

dx
Feed is the leading provider of data services for the Capital Markets industry, sourcing and storing direct market data feeds from a variety of exchanges and market participants around the world, having built one of the most comprehensive ticker plants, in addition to offering the broadest range of data services for streaming, consolidation, storage, extraction, analytics, including index construction and maintenance for
- side and
- side institutions of the global financial industry.

We are looking for Security Engineer to join the team.

Job Description

We expect Security Engineer to:

1. evaluate the security strategies and technical implementations
2. gather system requirements, working together with application architects, systems engineers and CISO
3. security operations, monitoring, threat analysis, alerting setup and investigation response
4. discover security services offerings
5. develop technical solutions and new security tools to help mitigate security vulnerabilities, automate repeatable tasks, prevent issues
6. ensure compliance with security policies and guidelines
7. ensure that the company knows as much as possible, as quickly as possible about security incidents
8. organize regular security assessments on new and existing products to find potential vulnerabilities
9. provide security guidance on new products, technologies and proposed architecture solutions
10. take an active role in driving internal security and privacy initiatives
11. communicate directly to software, hardware and cloud vendors on security and
    - related topics
12. choose, setup, configure and administer security products and tools
13. analyse security alarms and prepare run books / escalation guidelines for
    - duty teams
14. respond and record results of security incidents, perform a
    - mortem analysis
15. assess security policy, run audits
16. work together with other teams to secure the Cloud and
    - premise/datacenter deployments, setups and ongoing everyday processes
17. create automated security auditing and monitoring tools and enhancements

Qualifications

Requirements:

1. experience in setup, review and analysis of security alarms
2. security tools administration experience
3. understanding of networking, IP addressing and Industry Security standards
4. accurate and logical approach to resolving issues
5. desire to learn, suggest and implement new solutions
6. working on the implementation and maintenance of our security event monitoring tooling
7. building our security incident management and forensics capabilities
8. working with the Infrastructure team to review and manage our access controls and identity management
9. running the vulnerability management tools, analysing results and applying remediations
10. managing tooling to effectively detect and respond to security incidents
11. evaluating the impact of current security trends, advisories, vulnerabilities
12. building tooling for internal use that enable the team to operate at high speed and at scale
13. performing and automating
    - house network and host security testing
14. managing
    - party penetration tests
15. acting as incident manager and running interactions with external incident response and forensics teams in the event of a major incident
16. working with infrastructure teams to ensure that
    - driven security policies are correct
17. implementing security orchestration and automation on top of existing solutions
18. experience in hardening Cloud, Linux and Network concepts/approaches
19. be familiar with compliance frameworks or standards (e. g. SOC2, ISO27001, GDPR)
20. AWS Security Certified
21. mentoring other engineers in security
22. scripting/coding experience
23. automation and CI/CD experience
24. hands-on OS operation skills (Linux)
25. good communication skills and fluent in English