- Company Name
- Thorlabs
- Job Title
- IT Security Engineer - 1776
- Job Description
-
**Job Title:** IT Security Engineer
**Role Summary:**
Implement, maintain, and support security solutions across cloud, network, systems, middleware, and endpoints. Enhance reliability and efficiency of security controls, integrate security into IT workflows, and collaborate with infrastructure, SOC, and GRC teams to mitigate threats and ensure compliance.
**Expectations:**
- Hybrid work model (UK or Germany) with core hours 9:00‑17:30, flexibility for global support (including US time zones).
- Participate in on‑call or after‑hours activities as needed for security incidents.
- Contribute to continuous improvement of security processes and automation.
**Key Responsibilities:**
- Deploy and manage security tools (SIEM, firewalls, IDS/IPS, EDR, cloud security, WAF, etc.).
- Develop and automate vulnerability detection, prioritization, and remediation workflows.
- Monitor security systems, analyze alerts, and ensure optimal performance and policy compliance.
- Integrate security controls into change management, CI/CD, and infrastructure deployment pipelines.
- Support security assessments, penetration testing, and risk assessments.
- Work with GRC team to address GDPR, HIPAA, CCPA, PCI, NIST, ISO, and related compliance requirements.
- Partner with SOC for detection, alert handling, and SOAR orchestration.
- Provide scripting/automation (PowerShell, Python) to streamline security operations.
**Required Skills:**
- 5‑7 years in IT or cybersecurity roles.
- Hands‑on experience with at least two: SIEM (e.g., Microsoft Sentinel), firewalls/IDS/IPS/NAC, EDR, cloud security tools, WAF/penetration testing tools.
- Strong knowledge of Linux and Windows environments and enterprise networking.
- Familiarity with Azure, AWS, or GCP cloud platforms.
- Experience with GDPR, HIPAA, CCPA, PCI, NIST, CIS, ISO compliance frameworks.
- Proficiency in PowerShell or Python scripting.
- solid understanding of attack vectors, risk mitigation, and incident response.
- Excellent communication, collaboration, analytical, and problem‑solving abilities.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Engineering, or related field *or* equivalent practical experience.
- Preferred certifications: Security+, CCNA Security, or equivalent (not mandatory).