Security Engineer at Greenpeace

• Responsible for designing and maintaining our cybersecurity, you’ll define the technical implementation of policies and best practices, as well as identifying and mitigating security issues, vulnerabilities and misconfigurations by applying your in-depth knowledge of operating systems, infrastructure, and cloud providers. You’ll be working with the operations, development, and other teams to design, maintain and improve the organisation’s technical security posture – and will have a lead role in communicating our technical solutions across internal teams.

In this role you will:

• Mentor internal teams/individuals on security best practices by developing training and guidance materials.
• Provide subject matter expertise on architecture, authentication and system security to domain experts across departments and units.
• Proactively identify and reduce security risks, perform vulnerability management, and be a subject matter expert for mitigation approaches.
• Perform a range of systems and network security-related activities including proactive monitoring, reactive support and documentation of security incidents, ensuring configuration management standards.
• Ensure security assessments and forensic cyber security investigations are carried out when needed.
• Incorporate current security trends, advisories, publications and academic research into our practices.
• Assess security tools and solutions, integrating them as needed.
• Develop, maintain and perform operational procedures and protocols, and ensure operational tasks are performed reliably and consistently to reduce the risk of security threats and breaches.
• Triage and handle/escalate security issues independently.
• Author technical security documents.
• Take on a wide variety of security operations tasks as required

What we’re looking for:

• Relevant degree or equivalent experience.
• Technical credibility, with experience and expertise in Security Operations.
• Relevant experience in DevSecOps, forensics, and incident management.
• Ability to translate policies and procedures into technical auditable implementations.
• Passion for growth and learning in IT security matters.
• Ability to communicate clearly on technical issues with technical and non-technical audiences.
• Experience in an Agile environment.
• Ability to work effectively in a remote-only and culturally diverse team.
• Fluency in English, both verbal and written, plus preferably one other language.
• Support and alignment with Greenpeace goals and values