Job Description

Are you an autonomous and pragmatic Cyber Security Engineer with experience in fast-paced e-commerce environments? Do you have a passion for building robust, custom security tooling and driving remediation efforts across engineering teams?
A luxury retail and eCommerce company is disrupting the beauty industry by offering exceptional quality products direct from the world's leading labs, without the traditional high markups. They are seeking a skilled Cyber Security Engineer to protect their platform and drive security excellence as they scale their revolutionary direct-to-consumer model.
Cyber Security Engineer Core Responsibilities:

• Vulnerability Management: Triage, investigate, and verify fixes for newly discovered vulnerabilities, driving effective remediation efforts across technical teams.
• Security Implementation: Implement security controls, including configuring WAF rules, setting rate limits, and deploying additional measures to protect the environment.
• Custom Tooling: Contribute to the creation and maintenance of in-house security tools, focusing on automation and enhancing overall security capabilities.
• Incident Response & Triage: Investigate and triage security alerts, manage security incidents, and gather/communicate threat intelligence to stakeholders.
• Product Security: Assist development and product teams with security assessments, threat modeling, and penetration testing efforts.
• Business Advisory: Support and advise business stakeholders on cyber security issues, ensuring alignment with business goals and risk posture.

Cyber Security Engineer Must-Have Experience:

• E-commerce Security: Proven Cyber Security experience within an eComm or retail environment.
• Tooling: Experience with industry-standard SIEM and vulnerability scanning tools.
• Infrastructure as Code (IaC): Proficiency with Terraform or similar IaC tools for managing infrastructure securely.
• Cloud & Observability: Hands-on experience with cloud providers (specifically AWS) and tooling such as DataDog and Jira.
• Coding & Scripting: Proficient in reading code (e.g., Python or Scala) and using Git for version control.
• Stakeholder Management: Ability to confidently work with a range of technical and non-technical stakeholders across the business.

Cyber Security Engineer Nice-to-Have:

• Certifications: Relevant industry certifications such as CISSP or OSCP.
• Audits & Frameworks: Experience supporting audits (like CE+) or working with security risk management frameworks.
• Mobile Security: Familiarity with iOS or Android security principles.
• Training: Experience running security awareness campaigns and training workshops.

If you're a Security Engineer ready to use your judgment, technical skills, and collaborative mindset to protect a revolutionary direct-to-consumer platform, please apply!
Cyber Security Engineer - AWS, Terraform, Python - 75,000?92,000
Burns Sheehan Ltd will consider applications based only on skills and ability and will not discriminate on any grounds.

Skills Required