About this role
Section: Responsibilities
- Identity & access: Own accounts, permissions, credential hygiene and single sign-on.
- Security policy: Set and enforce security policy across the platform and internal tools, including policy expressed as code.
- Credential hygiene & secrets policy: Set and enforce the standards for credential hygiene and secrets management, working alongside DevOps, who own day-to-day secrets in the pipeline.
- Monitoring & alerting: Own security monitoring, alerting and detection across the platform.
Section: Knowledge & skills required
- App & cloud security: Application and cloud security experience.
- Identity & access: Identity and access management experience.
- Monitoring, alerting & detection engineering: You design detection and alerting, not only respond to incidents.
- Credentials & response: Secure handling of credentials and secrets, and incident-response experience.