REQ ID: 112046
JOB TITLE: Security Engineer
SALARY: Competitive
POSTING END DATE: 28/02/2023
LOCATION: Manchester

Jaguar Land Rover is harnessing technology to make driving smarter, safer and cleaner. You can help create a world in which responsible, sustainable vehicles revolutionise the driving experience for generations. Our vision is to leverage the incredible potential of technology to build vehicles that not only offer a premium, all–encompassing digital experience, but that also make our customers lives better.

THE OPPORTUNITY

You will be responsible for developing and maintaining our AppSec Pipeline which forms a key part of our DevSecOps Strategy, ensuring all of our deployed solutions are scanned for known vulnerabilities and misconfigurations.

WHAT TO EXPECT

This role sits within the Offboard Cyber Security Chapter in Manchester and would suit those who are technically minded; be that from a cyber security background or those with a software engineering background. This is a hands–on role which will require developing and maintain our CI/CD security tooling as well as collaborating closely with all areas of the business to develop complex security solutions that act as enablers for our product engineering teams.

We work with new and exciting technologies to provide global services for the connected car of the future. We work collaboratively and value each other's opinions, as part of the team here you will have the opportunity to impact and influence a technology platform used by hundreds of thousands of our customers daily, solving difficult engineering challenges on a global scale.

We are reimagining how we deliver secure global solutions in a highly agile environment. We have a strong focus on DevSecOps and empowering engineering teams to deliver and deploy large, secure systems at pace.

Some of our Security Engineer's responsibilities include:

• Providing consultation to product teams in security architecture and design, and conduct security reviews of new and existing products and services
• Working with engineering teams to create threat models
• Continual collaboration with stakeholders with a view to being a key part of the product delivery teams' success
• Maintaining strong knowledge of current security threats, mitigations and operational security best practices
• Designing, deploying and maintaining all aspects of our security tooling, including CI/CD, SAST, DAST, PKI, IAM
• Performing manual security assessments and writing automated security tests

WHAT YOU WILL NEED

You will be working closely with our engineering teams to help them uncover threats in their solutions, so a strong technical background is required. Knowledge of cyber security best practices and a good understanding of security threats and controls is also a must. This role is highly collaborative so would suite someone with a desire to work collaboratively across the wider engineering team.

We are looking for a self–starter, keen to work in a highly collaborative manner supporting our engineers and product teams as we deliver a connected data platform for the luxury vehicles of the future.

• A background in software engineering or cyber security, with knowledge of DevSecOps
• Familiarity of application security and threat modelling
• Experience implementing SDLC process, technology, and automation in a DevOps environment; ideally making use of OWASP best practices
• Experience within agile delivery frameworks
• Familiarity with of common application and infrastructure security vulnerabilities and mitigations
• Solid technical foundation, and keen to learn new things
• Experience with security testing tools such as BurpSuite, nmap, nessus and/or other SCA/SAST tools
• Experience developing/maintaining deployment pipelines (git, docker, k8s, maven/npm/other package managers)
• Comfortable with one or more scripting languages

Personal Profile

• An individual with a customer first mindset who is easy to do business, driven to deliver experiences that are personalised, transparent and dependable
• An individual, who works independently, is results driven, demonstrating tenacity, drive and perseverance with the ability to deliver operational plans in a complex, highly demanding environment.
• A passion for continuous technical improvement
• A resilient and enthusiastic who responds constructively to new ideas and inputs
• A good communicator with the ability to clearly communicate complex ideas
• An effective team player, actively develops and supports team members
• The ability to challenge existing thinking in a positive way whilst building credibility and trust through experience and personal style

SO WHY US?

Bring all this to the home of premium innovation, and you'll find the opportunities to further your career with a world–class team, a discounted car purchase and lease scheme for you and your family, membership of a competitive pension plan and performance related bonus scheme. All this and more makes Jaguar Land Rover the perfect place to continue your journey.

This role may offer the opportunity for hybrid working where you can split your time between working from home and in the office. At Jaguar Land Rover, hybrid working is a voluntary, non–contractual arrangement providing employees with more choice and flexibility around how, when and where they work, if suitable for their role. Further details can be discussed with the Hiring Manager at interview stage.

Please be aware that we may close this vacancy for applications before the stated deadline if we receive a high volume of interest. We strongly advise you to submit your application as early as possible.

Jaguar Land Rover is committed to equal opportunity for all.