Security System Engineer

Northab is looking for Security System Engineer for our customer in Stockholm
Duration: 04-Feb-2021 - 15-Jun-2021

Language- English and fluency in any nordic language

What you will do-

- Design and automate IT security assessments in all types of environments.
- Ensure that systems and infrastructure are designed, developed, implemented and monitored in accordance with appropriate IT security standards and procedures. This is, for example, about everything from legacy systems in the backend to customer interfaces, which are accessed from all over the world.
- Support product owners and help prioritize security checks based on regulatory and business requirements, the information processed and its exposure. We support many roles where some teams have good own skills. Ability to collaborate and communicate to get product owners and system teams to understand what is needed from a security perspective.
- Become a security ambassador for the development groups in Value Streams; participate in Program Increment (PI) Planning, System and Solution Demos and Inspect and Adapt (I&A) workshops, when needed.
- Advise solution architects on suitable security architecture and propose enabling solutions.
- Analyze on-prem and cloud services from a security perspective. Based on analyzes, propose 1) processes that handle threats, vulnerabilities and incidents, 2) improvements in prevention and recovery processes for incidents.
- Recommend tools and processes that underpin the security of solutions with medium to high complexity.
- Competence transfer to development teams when implementing in security, for example creating awareness of vulnerabilities that exist in system components and frameworks.
- Suggest secure solutions to systems and infrastructure problems.
- Perform security audits as well as risk and integrity assessments


Requirements:

The qualifications requested for the project:

- A strong security background with an IT-related academic degree or equivalent knowledge and skills acquired through work experience and continuing education.
- Extensive experience of assessments of security vulnerabilities.
- Extensive experience of implementing and / or advising on best practices in system and infrastructure security, including infrastructure as a code.
- From deep technical knowledge to knowledge in the following areas, with the ability to drive security change:


- System architecture
- Data centre technology
- Network design
- Cloud architecture
- Encryption
- Certificate Management (PKI)
- Directory Services (AD)
- Integration / integration platforms
- Clients (PC, mobile devices)
- Email security