Security Engineer

Vulnerability Management & Security Hardening – Tenable Administer and operate Tenable for vulnerability, compliance, configuration, and security hardening assessments. Configure and execute authenticated and unauthenticated scans across in-scope infrastructure. Assess systems against approved security baselines, including CIS Benchmarks and vendor-recommended hardening standards. Analyse and validate vulnerabilities and configuration findings, determine remediation requirements, and coordinate corrective actions with technology owners. Perform rescans and validation to confirm remediation and closure of findings. Troubleshoot scan coverage, credential, authentication, plugin, and related operational issues. Support vulnerability and hardening reporting, remediation tracking, risk acceptance, and exception processes. Cloud Security – Microsoft Defender for Cloud Administer and monitor Microsoft Defender for Cloud across in-scope cloud resources and workloads. Review and manage Secure Score, security recommendations, cloud security posture findings, regulatory compliance views, and security alerts. Identify cloud security misconfigurations, vulnerabilities, and control gaps and coordinate remediation with Cloud and Infrastructure teams. Support configuration and optimisation of Defender for Cloud plans, policies, workload protection, and security posture capabilities. Investigate relevant cloud security alerts and support remediation and incident response activities. Maintain visibility of security coverage and track cloud security findings through closure. Secure Remote Access – VPN & ZTNA Support the operation of enterprise VPN and ZTNA solutions. Assist with secure remote-access and identity-based access policies. Support investigation and troubleshooting of connectivity, authentication, authorisation, certificate, and application-access issues. Work with Network, Identity, Endpoint, and other technical teams to resolve secure-access issues. Support access reviews, configuration changes, upgrades, and continuous improvement activities. Apply Zero Trust and least-privilege principles when supporting remote-access requirements.. Identity & Access Management – Okta Support Okta-based identity and access management services. Assist with SSO, MFA, authentication policies, and application integrations. Support investigation and resolution of authentication, federation, MFA, and application-access issues. Work with relevant teams on identity federation and integration requirements using technologies such as SAML, OAuth 2.0, and OpenID Connect (OIDC). Support reviews of authentication and access configurations and recommend security improvements. Assist with integration of Okta with VPN, ZTNA, applications, and other enterprise technologies. Network Access Control – Aruba ClearPass Support Aruba ClearPass Network Access Control (NAC) operations. Assist with authentication, authorisation, device profiling, and network-access policy activities. Support investigation and troubleshooting of endpoint authentication, connectivity, posture, and policy-enforcement issues. Work with Network and Identity teams on ClearPass integrations with wired and wireless infrastructure and directory services. Support reviews and improvements of network-access policies based on user, device, and security requirements. Security Engineering & Operational Support Monitor the health, availability, coverage, and effectiveness of supported security technologies. Investigate security issues and coordinate resolution with internal technical teams, vendors, and product support where required. Support security incidents, technical investigations, and remediation activities. Implement approved security changes in accordance with established change-management processes. Maintain technical documentation, configuration records, operational procedures, and knowledge articles. Prepare operational reports covering security posture,