Information Security Consultant

Our infrastructure specialists are responsible for designing and implementing backend services. They ensure reliability security and scalability for all platform layers within our solutions. Infrastructure teams provide expertise across virtualization cloud services storage solutions cybersecurity and scripting and automation.  

As an InfoSec Engineer at Endava youll secure infrastructure and applications by implementing security controls conducting risk assessments and ensuring compliance. Youll collaborate with teams to integrate security into the SDLC automate security operations and respond to threats to maintain a resilient security posture.

Responsibilities:

• Deploy complex tooling into an existing infrastructure
• Deliver solutions created by the architecture team
• Build advanced hunting/custom detection rules
• Work with our clients to understand the maturity of their cyber security capabilities and help define strategies to become more cyber resilient
• Develop and implement custom security policies and procedures to minimize the risk of advanced cyber attacks
• Conduct technical security reviews approval of suppliers and design and test documentation
• Act as subject matter expert to the business and to other members of the Security team as required
• Collaborate closely with architects designers engineers and other crossfunctional team members within the organization to ensure that our solutions are built to the highest security standards
• Build a beneficial relationship with customers through presales and thought leadership activities
• Represent the company in a professional manner and enrich client relationships to Endavas benefit
• Assist with security incident management and response activities
• Support the formulation of RFP responses and the more general bidding process
• Take a proactive role in identifying security risks mitigations and opportunities to strengthen Endava and our clients resilience to cyberattacks and security incidents

Qualifications :

• Education & Certifications

  • Bachelors degree in Computer Science Engineering Mathematics or a related field (or equivalent professional experience).
  • Relevant security certifications such as CISSP CCSP CISM OSCP CASP or AWS Certified Security Specialty are highly preferred.

• Experience & Expertise

  • 5 years of experience in a senior information security role delivering enterpriselevel security in complex environments.
  • Strong understanding of information security principles techniques and standards (e.g. NIST CIS ISO).
  • Proven experience in security risk assessment risk management and security auditing.
  • Experience with security operations vulnerability management and security testing including scanning identifying resolving and reporting risks.
  • Handson expertise in Microsoft 365 Security networking and infrastructure security.

• Technical Skills

  • Strong scripting skills (Python Shell or similar).
  • Experience with security tools such as IDS/IPS SIEM vulnerability scanners and endpoint protection.
  • Proficiency in automation tools (Ansible Chef Terraform) for security operations.
  • Experience with containerization and orchestration systems (Docker Kubernetes).

• Soft Skills & Additional Capabilities

  • Excellent communication and presentation skills with the ability to engage both technical and nontechnical stakeholders.
  • Strong problemsolving abilities and capacity to work under pressure.
  • Ability to stay up to date with emerging security technologies and assess their relevance for Endava client environments.
  • Experience in formal documentation including creating reports and security procedures.

Additional Information :

Discover some of the global benefits that empower our people to become the best version of themselves:

• Finance: Competitive salary package share plan company performance bonuses valuebased recognition awards referral bonus;   
• Career Development: Career coaching global career opportunities nonlinear career paths internal development programmes for management and technical leadership;
• Learning Opportunities: Complex projects rotations internal tech communities training certifications coaching online learning platforms subscriptions passiton sessions workshops conferences;
• WorkLife Balance: Hybrid work and flexible working hours employee assistance programme;
• Health: Global internal wellbeing programme access to wellbeing apps;
• Community: Global internal tech communities hobby clubs and interest groups inclusion and diversity programmes events and celebrations.

Our diversity makes us stronger it drives meaningful change and enables us to build innovative technology solutions. We are committed to creating an inclusive community where all of us regardless of background identity or personal characteristics feels valued respected and free from discrimination. As an equal opportunity employer we welcome applications from all individuals and base hiring decisions on merit skills qualifications and potential.

Remote Work :

No

Employment Type :

Fulltime