IT Security Engineer

We have a new opportunity for an IT Security Engineer to join ARAG UK. As a member of the Technology, Data and Strategic Change team, this role will be at the forefront of our security strategy, ensuring the confidentiality, integrity and availability of our information and information systems.

This role will focus on security and quality control in the IT department and will include designing, building, and securing, scalable and robust systems. This position will help the company understand security threats and help create strategies to protect ARAG’s assets and interests.

The successful applicant will need to demonstrate good technical, organisational and communication skills and be able to build close relationships across teams within the IT Department and with other technical teams and business departments across the company.

This role will include assessing security threats and risks the company faces ensuring compliance across ARAG UK as well as keeping up to date with new security developments and adherence to security best practice.

 At ARAG UK, we support flexible working and would be open to discussing flexible working options.

Professional skills/experience:

• Able to demonstrate a good understanding of information security frameworks, standards, and security best practice (ISO27001, NIST CSF, Cyber Essentials, OWASP).
• Knowledge and adherence to data protection legislation and regulatory requirements (e.g. GDPR, FCA SYSC, PCI DSS).
• Experience in designing secure components (e.g. networks, systems, applications, security technologies).
• Comprehensive knowledge of network design, defence-in-depth principles, and network security architecture.
• Extensive experience and understanding of security analysis tools, defensive technologies and other security technologies (e.g. SIEM, VAS, IDS/IPS, Firewalls, IAM, NAC, patch management, anti-malware).
• Strong working knowledge of authentication technologies (e.g. two-factor, multifactor).
• Foundational knowledge of “BeyondCorp” principles (e.g. limiting access to confidential information, limiting remote access to applications, differentiating between corporate and personal devices, trusted endpoints).
• Confident using Active Directory (e.g. GPO, DNS, DHCP).
• Knowledge of endpoint security solutions (e.g. HIDS, anti-malware, file integrity, DLP).
• AWS and cloud platforms (e.g. SaaS, IaaS, PaaS).
• System administration, supporting multiple platforms and applications.
• Skilled in conducting vulnerability scans and identifying vulnerabilities in systems.
• Knowledge and experience utilising  AWS, Azure, and other cloud platforms, including hybrid cloud (e.g. SaaS, IaaS, PaaS).

Qualifications (Desirable)

• SSCP: Systems Security Certified Practitioner
• CRISC - Certified in Risk and Information Systems Control
• CEH: Certified Ethical Hacker

ARAG UK has been helping businesses and individuals gain access to justice for over 40 years. It’s our founding principle to enable everybody, not just those who can afford it, to assert their legal rights.

Thousands of businesses and individuals defend or pursue legal action each year safe in the knowledge that ARAG UK are paying their legal bills. Our businesses include a legal expenses insurance company and a law firm with many opportunities in both areas.

We have always been aware that it’s the people that really make it happen; the quality of our people defines the quality of the company, the service we offer and the good outcomes for our customers, so we’re committed to creating a great place to work for our employees.

We believe it is an exciting time to join ARAG UK. You can expect an organisation that will challenge and develop you to progress your career.  

By giving you every opportunity to develop yourself professionally and personally, we also pride ourselves on having an open, inclusive and high energy culture that encourages a fun working environment and places our customers at the very heart of everything we do.

If you are keen to become part of our exciting future then we would love to hear from you. In addition to the very genuine development opportunities we provide we also offer a generous reward and benefits package.