Denne jobbannonsen har utløpt
Sign in to auto-apply
Stillingsbeskrivelse
Senior Security Engineer
Do you want to shape how security is done in practice, balancing risk, speed, and real-world constraints across a modern technology stack? NGI Digital is looking for a Senior Security Engineer to shape and drive security and compliance across our digital products and operations.
About the role
This is a hands-on senior role (approx. 70% technical / 30% strategy and compliance) where you will both set direction and actively contribute to implementation. You will work closely with the CISO to shape how we approach security, while also being directly involved in building and improving solutions.
You will:
- Define and drive security principles, standards, and roadmaps in collaboration with the CISO.
- Evolve our cloud, identity and core IT security posture.
- Strengthen security across core IT and operational environments, including endpoints, M365, and infrastructure.
- Drive improvements in detection and response capabilities, including monitoring, incident handling, and vulnerability management.
- Implement and adapt security controls aligned with ISO 27001 and NIS2 in a pragmatic, scalable way.
- Enable informed, risk-based decisions by making trade-offs between security, cost, and delivery visible.
Technology
- Cloud platforms & infrastructure (Azure (primary) and AWS)
- Hosted infrastructure & storage (managed servers, virtual infrastructure, and NetApp storage solutions)
- Identity, security & compliance tools (Microsoft Entra ID (Azure AD), Microsoft Defender, Microsoft Purview)
- Platforms, containers & infrastructure as code (Kubernetes (AKS), Docker, Terraform)
- Operating systems & endpoints (Windows, Linux, macOS)
- Collaboration & productivity platforms (Microsoft 365 and Power Platform)
Krav
- You have solid experience (typically 5+ years) working with information security.
- You have experience working closely with engineering and operations teams.
- You possess a track record of improving security posture in a pragmatic, risk-based way.
- You have experience making and defending security trade-offs in real-world scenarios.
- You are comfortable taking ownership and driving initiatives in collaboration with others.
Ferdigheter
Information SecurityAzure/AWS Cloud SecurityISO 27001/NIS2 ComplianceIdentity and Access Management (Entra ID)Incident Response and MonitoringInfrastructure as Code (Terraform)Risk Management
Erfaring
senior