If you’re reading this, we are excited for you. You’ve landed on the job description for a company that will obsess over your well-being with unrivalled work-life balance, your career development providing transparent career paths and learning support for every single person, and knows that you are unique and will celebrate that. If you are passionate about what you do and want a career in one of the most exciting yet stable industries, read on…
Egress Software Technologies are a leading cyber security company providing global solutions to protect against human-activated risk. By aggregating data to derive intelligence, Egress is the only company able to predict future threats and prevent attacks or breaches – before they happen.
Egress is proud to support thousands of Enterprise customers across a range of sectors including Financial Services, Legal, Healthcare, and Government organizations. By protecting millions of employees around the world from advanced threats, businesses can safely achieve their mission without unnecessary risk.
At the forefront of the IT Cyber Security industry, Egress can provide an unrivalled career path in Security Operations.
The Team
The three Egress security teams report to the Chief Information Security Officer (CISO), these are:
- Security Operations – the day-to-day management of operational processes and incidents
- Cyber Security – defining security best practice of technologies
- Compliance & Risk – managing accreditations, auditing and risk management
This role forms part of the SecOps team, which ensure that we operate our business in line with the defined policies and procedures and also manage all group security incidents. This role requires a technical background and experience of working with public cloud technologies.
Whilst there are process aspects to the role there are two main areas of focus for the team:
- Vulnerability management. The team manage issues identified through internal and external vulnerability testing. Internally we use tools like Snyk (one of several tools available) to find issues in the software development lifecycle. Externally, SecOps work with a penetration testing company to define the scope of pentests and manage the process with engineering. Once issues are identified SecOps work closely with operations and engineering teams to resolve them.
- Incident management. The team manage our security incident response activities, investigating alerts using tools such as Azure Sentinel. SecOps will coordinate the incident response with resolving teams and engage with key stakeholders for updates. As the team works office hours, engaging a managed SOC provider who cover 24X7 incident management.
SecOps engage with teams across the business and at all levels. In this role you will be a key contributor to maintaining a good security posture and building on our security culture.
Other duties include security awareness and training, security vetting and supplier onboarding.
The wider security team work closely together with opportunities for cross-training and career development. The management team actively support personal development, with access to training tools such as Skillsoft and O’Reilly. We are looking for a candidate who can demonstrate key competencies and a desire to learn and apply new skills. You will be supported with mentoring from across the team and have opportunities to learn in an environment that uses the latest technologies.
As a security company we also use our own products and services internally, and the SecOps team are encouraged to give feedback to the product management group to help further develop the capabilities of our products with real end-user feedback.
The security team are split between our London and Sheffield offices, but ensure we spend time in social activities and not just work. Whether it’s a breakfast catch-up, a visit to an expo or one of our regular social events after work – we recently completed the National Three Peaks Challenge together.
The Role
Reporting to the Security Operations Manager, your key tasks may involve:
- Managing vulnerability scanning tools - SAST, SCA, IaC, Containers & DAST for all Egress products
- Investigate SIEM alerts, working with the Engineering and Operations teams to resolve issues
- Managing vetting applications, supplier onboarding and security awareness programmes
- Plan and manage 3rd party penetration testing
- Support customer requests for information (RFI) on security related questions
Identify and contribute to our continuous improvement plan
The Person
As a member of the Security Operations team, you will work in a hybrid environment both independently and as part of a team, typically in the office 2 days per week.
You should have good prioritisation and organisational skills whilst able to stay calm in the event of a high priority incident. You should have a technical background to be able to triage incidents, this requires an understanding of public cloud services.
You will need to be able to articulate your findings in a persuasive manner and apply good problem-solving skills.
The company
We are proud of our uniquely agile, effervescent, and people-focused equal-opportunity environment. Our core values of Owning it, Being Bold, Doing the right thing and Being a bar-raiser run through everyone who works for us, and everything we do.
We are a sociable company and haven’t let a global pandemic stop us from continuing to enjoy the place we work even if is more of a virtual experience at times. The atmosphere across the business is friendly and supportive, with a constant desire to improve in everything we do! We are now back to running our monthly paid-for social activities as our offices continue to get busier! For those who are working remotely, we can’t promise the coffee you have in your kitchen will be as good as the free ones we have in the offices but the people you share it with will be just as warm and welcoming.
Diversity, Equity and Inclusion
Here at Egress we are committed to diversity, equity and inclusion. Our workforce has consistently sat above the national average for both BAME and female representation, but we recognize that we can always do more. Every job description is subject to scrutiny through a gender bias decoder ensuring our roles are as inclusive and attractive as possible. Our culture is one that aims to nurture a welcoming and safe working environment for everyone with initiatives such as our employee-led Culture Club, dedicated mental health first aider network and regular awareness seminars all contributing to a great place to work whoever you are.
Privacy and Your Data
Please take the time to check and read our recruitment privacy policy. The information you provide to us when you apply will be held, stored and processed by Egress Software Technologies Limited in accordance with it.
Any job offer that we may make to you will be subject to you successfully passing background checks.