CV-Library

Security Engineer

• Manage security alerts, investigations and incidents across CV-Library’s technology estate
• Monitor emerging cyber threats and threat intelligence, assessing risks and recommending security-control improvements
• Lead initial security incident response, coordinating containment and remediation with technical teams
• Maintain incident records and conduct post-incident reviews
• Improve security tooling, including SIEM, endpoint protection, vulnerability management and cloud security solutions
• Own endpoint and Microsoft 365 security, including device security, conditional access and identity protection
• Define cloud infrastructure and software-delivery security standards and guardrails with Platform DevOps teams
• Manage identity and access-management processes, including provisioning, access reviews and least privilege
• Provide security guidance on infrastructure, platform and application changes
• Oversee vulnerability management and remediation
• Coordinate external penetration testing and track remediation actions
• Maintain security documentation, policies and audit evidence for ISO 27001 compliance
• Apply GDPR and data-protection principles to security controls and documentation
• Support supplier and third-party security assessments
• Assess secure use of AI technologies and promote security best practices across technical and non-technical teams
• Report directly to the Platform & Service Operations Manager