Description
- Who we’re looking for:A Security Engineer with experience designing, implementing and maintaining security procedures
- The challenge:To protect Tillo's systems through implementing and maintaining robust security procedures while ensuring compliance and meeting partner security requirements
- Where you’ll work:This role will be based in our Hove office 1/2 days a week
We're in the business of rewards and incentives, so we know a thing or two about the importance of giving back. We can't grow as a business without growing as individuals, so we are committed to providing a workplace where passionate, driven individuals can thrive. We value collaboration, trust, positivity, and a willingness to learn - only by working as a team will we reach our goals.
We’re the market leader in the UK and are active in a number of other markets including USA, Europe, Australia and India.
Day to day this role will look after
- Application Security:Driving security by design principles, implement privacy-preserving features, and ensuring secure coding practices are followed throughout the development lifecycle.
- Risk Assessment:Conducting regular security assessments and vulnerability scans to identify weaknesses in applications, systems and networks, ensuring alignment with ISO 27001 requirements.
- Monitoring and Reporting:Continuously monitoring security systems and generate reports on security incidents, breaches, and compliance. Maintaining documentation for ISO 27001 audits.
- Implementation of Security Solutions:Working with relevant engineering teams and other departments on implementing security measures and resolving vulnerabilities.
- Incident Response:Developing and managing incident response plans, including investigating security breaches and coordinating recovery efforts.
- Policy Development:Updating security procedures, and standards to comply with industry regulations, including ISO 27001, PCI DSS, and GDPR requirements.
- Collaboration:Working with engineering teams to integrate security into system architectures and software development processes.
- Education and Training:Providing training and support to engineers on security best practices, awareness, and ISO 27001 requirements.
- Research:Staying current with emerging security trends, threats, and technology.
- Compliance Management:Maintaining and improving Engineering-related aspects of ISO 27001 certification, ensuring all controls are effectively implemented and documented.
What we’re looking for
- Proficiency in security tools and technologies, such as SIEM, firewalls, and antivirus software
- Good understanding of software development processes, ideally with PHP/Laravel
- Experience with AWS
- Understanding of Linux, Docker and Kubernetes
- Experience with ISO 27001 or SOC 2 implementation and maintenance
- Knowledge of payment security standards (PCI DSS)
- Experience with security automation and DevSecOps practices
- Strong problem-solving abilities and attention to detail
It’s not essential, but we’d love to hear about it if you have experience with/certifications in
- Cyber Security tools
- ISO 27001 Lead Implementer/Auditor
- CISSP, CEH, or equivalent
Benefits
We offer all our employees trust and empower our team to work with flexibility and autonomy. We’re a close-knit team and love working collaboratively, with our hybrid model, our team can come together at our fantastic office in Hove, but also focus in their own space. The Tillo team are a motivated bunch and we all work hard to push Tillo forwards, always innovating. We completely understand the importance of work/life balance and offer a supportive and collaborative working environment with the following benefits:
️ Enhanced annual leave of 26 days per annum
Private Medical care through Vitality
Designated share options
Access to Tillo’s Storefront with discounts & gift card vouchers
Hybrid Working
Top spec equipment including laptop, mouse, keyboard, monitor
Anniversary gifts
Monthly breakfasts, drinks, snacks and events
Individual Learning & Development budget
Tillo was founded in 2016. From the start, our goal was to set a new global standard for rewards and incentives, and we're proud to have achieved just that. Our rich network encompasses 2,000+ of the world's best-loved brands, and we're just getting started!
We operate in 37 countries and 25 currencies and have processed over $4bn worth of digital gift cards through our robust platform. We have offices in the UK and the US, and our team has surpassed 130+ employees and counting.
