Senior Security Engineer

<h3>About the role</h3> <p>Reporting to the Head of Technical Security &amp; Security Operations, the Senior Security Engineer will play a key role in ensuring the security of Monument Re’s information systems, networks and data. The role-holder will possess a deep understanding of security technologies, risk management, and operational security practices and be responsible for advising on and implementing technical security controls to secure our information assets.</p> <h3>Responsibilities</h3> <strong>Technical Security Controls</strong><ul><li>Implement, operate and improve technical security controls, including SIEM, honeypots, EDR, vulnerability scanning, email scanning.</li><li>Conduct regular security assessments, vulnerability scans and penetration tests to identify and mitigate risks.</li><li>Work alongside the Security Operations Lead and Security Architect to ensure compliance with relevant security standards, regulations, and best practices through the implementation of appropriate technical security controls.</li><li>Offer pragmatic and risk-driven advice to stakeholders on how to balance both security and operational considerations.</li><li>Add security gaps and audit findings to the security risk register and work with stakeholders and risk owners to support the delivery of agreed risk management actions.</li><li>Support the collection of KPIs and KRIs that contribute to the periodic security reporting to various governance forums.</li><li>Participate in (and sometime lead) the technical aspects of internal and external security audits.</li></ul><strong>IT Project Support</strong><br/><ul><li>Offer security support (alongside the Security Architect) for IT and corporate projects to ensure security controls are implemented as per the security requirements of the project.</li><li>Represent the security team as needed in project management and change forums.</li></ul><strong>Security Operations &amp; Incident Response</strong><ul><li>Offer support as needed for the security monitoring, triage and response to day-to-day security events and incidents such as phishing attacks.</li><li>Assist with the operation of the SIEM, threat intelligence sources, EDR, vulnerability management and other tooling to ensure the early detection and response to security threats and incidents.</li><li>Provide incident response support when required to ensure the rapid containment, eradication and recovery from any security incidents.</li><li>Ensure the security control requirements of DORA are met across the Monument Re group.</li></ul> <h3>Role Requirements</h3> <ul><li>Minimum of 3-5 years experience in similar technical security engineering role.</li><li>Experience of working in a regulated environment, ideally financial services.</li><li>Strong experience of using industry leading SIEM, EDR and vulnerability management tooling such as Rapid 7 IDR and IVM tooling, Windows Defender, M365 and Azure security, Abnormal Security and industry threat intelligence services such as Recorded Future and the FS-ISAC.</li><li>Experience of the technical engagement aspects of Internal and External Audits, representing the audited function or business and leading action plans to remediate findings.</li><li>Experience with working in partnership with IT, GRC and Security Operations teams.</li><li>Experience of incident response activities, particularly during high pressure situations where experience and good decision making supported the triaging, containment and recovery from a security incident.</li><li>An understanding of DORA and the regulatory requirements for maintaining Operational Resilience.</li><li>Ability to work independently and think proactively.</li><li>Ability to deliver results through collaboration and influencing of internal and external stakeholders.</li><li>Ability to effectively communicate with all stakeholders, explain security risk and advocate for the implementation of required security controls across the group.</li><li>Experience of representing the information security function in management forums and periodic vendor review meetings to report on and articulate third-party risk as well as make recommendations to mitigate or close these risks.</li><li>Good interpersonal, written and verbal communication and engagement skills with experience of engaging with all levels of employees and external partners.</li><li>Must have high attention to detail; be a self-starter and able to prioritize in a fast moving, high pressure, constantly changing environment; high sense of urgency.</li><li>Be energetic, passionate with a positive attitude.</li><li>Holder of relevant technical security certifications (ISC2, SANS GIAC, vendor-specific) or equivalent training/experience.</li><li>Excellent English language skills. French language skills a plus.</li><li>Periodic overseas travel will be required to deliver on-site assessments and audits.</li></ul> <h3>Location</h3> <p>Dublin, Ireland.<br/>Hybrid.</p> <h3>Closing D