Security Engineer, Ometria

• Experienced - You will have previously worked for 3+ years developing in / administering an AWS cloud environment and can make improvements to AWS configurations. Prior experience using terraform would be an advantage
• Curious - you are excited about technology and like learning new things. You take proactive steps to educate yourself on what’s happening in the security and privacy industry, and how this can better inform our internal practices
• Accountability - You work with a level of independence on tasks / projects that you are assigned and are able to identify challenges to minimise delay or impact. You work diligently to finish your work within agreed deadlines
• Analytical skill - You utilise evidence and data to methodically make informed decisions and are comfortable analysing large amounts of data. You are able to critically consider projects and identify security and privacy risks
• Business Focus - Ability to identify risk whilst pragmatically considering the commercial impact and necessary actions
• Confident communicator -You contribute to Engineering scoping discussions and are confident giving constructive feedback and challenging ideas with a wide variety of stakeholders. You feel comfortable presenting best practice updates and training to internal audiences

• We are looking for a Security Engineer. You’ll be directly responsible for safeguarding Ometria’s digital assets by actively managing risks to maintain a secure and resilient environment. You will work closely with our Product and Engineering teams to ensure that security and privacy best practices are followed whilst finding solutions to meet our business goals
• Work with the security, legal and people teams to pass the annual ISO 27001 and 27701 audit to reduce the likelihood / impact of incidents and to demonstrate the ‘respect for the trust we’ve been given’ as a business
• Identify opportunities to upskill and educate on security and privacy best practices eg. present on tech strategy/tech session/all hands
• Ensure privacy and security measures are integrated into all projects to reduce risk and minimise the chance of incidents
• Responding to alerts and security and privacy risk events
• Alert triage
• Identification and assessment of risks
• Following security and privacy playbooks for any incidents
• Writing incident reports
• Building and maintaining expertise in security and privacy through learning and certifications
• Sharing expertise with colleagues by:
• Advising on project risk reduction through security and privacy by design practices
• Helping with vulnerability triage and recommending appropriate fixes or mitigations
• Recommending improvements to policies and processes of the company
• Building trust in the company through participation in ISO 27001 and 27701 audits, working with penetration testers and external security researchers, and input into sales questionnaires and client vendor security reviews

• 30 days holiday + 1 day on your birthday (plus bank holidays)
• Health Insurance (Bupa)
• Mental Health Support (Spill, Calm)
• Cycle to work scheme
• Enhanced Financial Benefits (Salary Sacrifice Pension, DIS, Income Protection)
• Professional Development Fund

Total funding: $72.2m

Consumers are becoming increasingly frustrated with irrelevant ads, particularly as competition in retail intensifies. Recognising this, Ometria uses AI-powered targeting to ensure ads are personalised, providing businesses with more effective marketing and offering consumers a better experience with fewer unwanted ads.