Security Engineer

Job Description:

• Administer and operate Tenable for vulnerability compliance configuration and security hardening assessments.
• Configure and execute authenticated and unauthenticated scans across in-scope infrastructure.
• Assess systems against approved security baselines including CIS Benchmarks and vendor-recommended hardening standards.
• Analyse and validate vulnerabilities and configuration findings determine remediation requirements and coordinate corrective actions with technology owners.
• Perform rescans and validation to confirm remediation and closure of findings.
• Troubleshoot scan coverage credential authentication plugin and related operational issues.
• Support vulnerability and hardening reporting remediation tracking risk acceptance and exception processes.

• Administer and monitor Microsoft Defender for Cloud across in-scope cloud resources and workloads.
• Review and manage Secure Score security recommendations cloud security posture findings regulatory compliance views and security alerts.
• Identify cloud security misconfigurations vulnerabilities and control gaps and coordinate remediation with Cloud and Infrastructure teams.
• Support configuration and optimisation of Defender for Cloud plans policies workload protection and security posture capabilities.
• Investigate relevant cloud security alerts and support remediation and incident response activities.
• Maintain visibility of security coverage and track cloud security findings through closure.

• Support the operation of enterprise VPN and ZTNA solutions.
• Assist with secure remote-access and identity-based access policies.
• Support investigation and troubleshooting of connectivity authentication authorisation certificate and application-access issues.
• Work with Network Identity Endpoint and other technical teams to resolve secure-access issues.
• Support access reviews configuration changes upgrades and continuous improvement activities.
• Apply Zero Trust and least-privilege principles when supporting remote-access requirements..

• Support Okta-based identity and access management services.
• Assist with SSO MFA authentication policies and application integrations.
• Support investigation and resolution of authentication federation MFA and application-access issues.
• Work with relevant teams on identity federation and integration requirements using technologies such as SAML OAuth 2.0 and OpenID Connect (OIDC).
• Support reviews of authentication and access configurations and recommend security improvements.
• Assist with integration of Okta with VPN ZTNA applications and other enterprise technologies.

• Support Aruba ClearPass Network Access Control (NAC) operations.
• Assist with authentication authorisation device profiling and network-access policy activities.
• Support investigation and troubleshooting of endpoint authentication connectivity posture and policy-enforcement issues.
• Work with Network and Identity teams on ClearPass integrations with wired and wireless infrastructure and directory services.
• Support reviews and improvements of network-access policies based on user device and security requirements.

• Monitor the health availability coverage and effectiveness of supported security technologies.
• Investigate security issues and coordinate resolution with internal technical teams vendors and product support where required.
• Support security incidents technical investigations and remediation activities.
• Implement approved security changes in accordance with established change-management processes.
• Maintain technical documentation configuration records operational procedures and knowledge articles.
• Prepare operational reports covering security posture vulnerabilities control health trends and remediation status.
• Identify opportunities for security process improvement automation and operational efficiency.
• Provide technical evidence and support for security assessments audits and compliance activities.
• Collaborate with Security Operations Network Infrastructure Cloud Identity and Application teams to improve the overall security posture.

• 2-3 years of relevant hands-on experience in cybersecurity engineering security operations network security cloud security identity and access management or related security engineering roles.
• Demonstrated experience supporting security technologies in medium to large enterprise environments.
• Ability to independently administer configure troubleshoot and support enterprise security technologies.
• Experience working across Security Network Infrastructure Cloud Identity and Application teams.
• Strong problem-solving skills with the ability to investigate technical issues and drive them through resolution.

Candidates must have practical hands-on experience with all of the following:

• Tenable vulnerability scanning authenticated scanning compliance/configuration assessment security hardening finding analysis remediation validation and scan troubleshooting.
• Microsoft Defender for Cloud Cloud Security Posture Management (CSPM) Secure Score security recommendations workload protection alerts security policies and remediation.

• Networking & Network Security TCP/IP DNS DHCP routing VLANs network segmentation firewalls and common network protocols.
• Operating System Security Windows and Linux security system hardening patching and secure configuration concepts.
• Identity & Access Management Active Directory Microsoft Entra ID IAM SSO MFA RBAC SAML OAuth 2.0 and OpenID Connect.
• Vulnerability & Configuration Management vulnerability management lifecycle security configuration management CIS Benchmarks and secure configuration baselines.
• Cloud Security Microsoft Azure security fundamentals including identity networking access control security posture and workload security.
• Cryptography & Secure Communications TLS digital certificates encryption and PKI fundamentals.
• Security Monitoring & Incident Response security logging monitoring alert investigation and incident response fundamentals.
• Zero Trust Security Zero Trust principles least-privilege access identity-based access and secure-access concepts.
• Enterprise VPN understanding of VPN architecture secure remote-access policies authentication connectivity and common troubleshooting concepts.
• Okta understanding of SSO MFA authentication policies identity federation application integration and access-management concepts.
• Zero Trust Network Access (ZTNA) understanding of policy-based secure access identity- and context-based access application access and ZTNA architecture.
• Aruba ClearPass understanding of Network Access Control (NAC) authentication and authorisation device profiling policy enforcement and network-access concepts.

• Microsoft Defender for Endpoint / Microsoft Defender XDR.
• Microsoft Sentinel or another enterprise SIEM platform.
• Privileged Access Management (PAM) technologies.
• Firewall and network-security platforms.
• Azure Policy and other Azure-native security controls.
• PowerShell or Python scripting for automation reporting or operational tooling.
• Experience integrating security platforms using APIs.

• Bachelors degree in Cybersecurity Computer Science Information Technology Engineering or a related discipline or equivalent relevant professional experience.
• Relevant industry or product certifications are advantageous such as Microsoft Security/Azure Tenable Okta Aruba ClearPass CompTIA Security or networking certifications.

• Strong cybersecurity fundamentals and technical troubleshooting capability.
• Ability to analyse security findings and determine appropriate remediation actions.
• Ability to work independently while collaborating effectively across technical teams.
• Strong ownership of technical issues from identification through resolution.
• Clear written and verbal communication including the ability to explain technical risks and recommendations.
• Good documentation operational reporting and stakeholder-management skills.
• Ability to prioritise activities based on technical risk business impact and operational requirements.

At DXC Technology we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing productivity individual work styles and life circumstances. Were committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services such as false websites or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process nor ask a job seeker to purchase IT or other equipment on our information on employment scams is availablehere.