AVP Security Engineer

Purpose of the Role

Responsible for the operational delivery, continuous improvement, and performance oversight of client’s Managed Security Services capability under the Cyber Fusion Centre. The role supports the implementation, operation, monitoring, and optimisation of security controls across enterprise platforms, infrastructure, cloud services, applications, and emerging technology environments. The incumbent is expected to provide hands‑on engineering support, maintain effective security operations processes, strengthen preventive and detective controls, and contribute to the organisation’s cyber resilience, regulatory readiness, and threat response capabilities.

Role Attributes

Operational ownership and engineering support for client Managed Security Services across the client Group, with focus on reliable service delivery, effective control operations, timely issue resolution, measurable security outcomes, and alignment with Enterprise Information Security priorities.

Key Responsibilities

Managed Security Services Operations

• Operate, maintain, and continuously improve managed security services across the enterprise security technology stack.
• Oversee service delivery, incident handling support, operational health, capacity, availability, and performance of assigned security platforms.
• Maintain service documentation, runbooks, escalation paths, standard operating procedures, and operational metrics.

Security Engineering and Control Implementation

• Implement, configure, tune, troubleshoot, and maintain security controls across infrastructure, endpoint, network, cloud, application, and identity environments.
• Support design and deployment of preventive, detective, and responsive security controls aligned to enterprise risk and regulatory expectations.
• Validate control effectiveness through monitoring, testing, reporting, and continuous improvement activities.

Security Tools and Technology Management

• Provide hands‑on support for security solutions including email security, intrusion detection and prevention, attack surface monitoring, anti‑malware, web application firewall, certificate management, vulnerability monitoring, and related managed services.
• Maintain platform configuration baselines, access controls, integration points, and operational readiness for assigned tools.
• Work with vendors and managed service providers to resolve issues, track service improvements, and ensure agreed service levels are met.

System Security Requirements and Documentation

• Identify, document, and maintain system security requirements, operational procedures, configuration standards, and technical artefacts.
• Support evidence collection, audit responses, control attestation, and compliance reporting where required.
• Ensure operational documentation remains accurate, current, and usable by internal teams and service providers.

AI Security Operations Support

• Assist in implementing security controls for AI and machine learning environments, including data protection, model deployment, inference endpoints, logging, access control, and secure configuration.
• Support identification and mitigation of AI-related risks such as data leakage, prompt injection, adversarial attacks, model abuse, and data poisoning.
• Contribute to operational readiness for AI security monitoring and incident response.

Post-Quantum Cryptography and Crypto-Agility Support

• Support post-quantum cryptography readiness activities, including cryptographic inventory, certificate visibility, dependency tracking, and migration planning.
• Track developments in quantum-resistant cryptographic standards and assess potential impacts on TLS, digital signatures, encryption services, and certificate management.
• Contribute to hybrid cryptographic migration planning and crypto‑agility improvements.

Project Delivery, Risk Reduction, and Continuous Improvement

• Support security projects, remediation initiatives, service improvements, and operational uplift activities from planning through delivery.
• Track assigned actions, risks, dependencies, and milestones to ensure timely completion and transparent reporting.
• Recommend practical improvements to strengthen resilience, reduce operational risk, and improve security outcomes.

Key Decisions within the Role

• Prioritisation of day-to-day operational activities, service requests, alert tuning, troubleshooting, and remediation support within agreed scope.
• Recommendation of security configuration improvements, control enhancements, process changes, and service optimisation opportunities.
• Development and maintenance of standard operating proc