NGO - IT Security Engineer

Why Nexus Global Operator / Why Now

• Shape the security controls protecting technology that supports the Nexus Operator environment
• Apply security engineering expertise to critical, high-availability payment infrastructure
• Influence security decisions across cloud platforms, applications and third-party integrations
• Work closely with engineering, technology operations and external security specialists to reduce cyber risk
• Build practical security controls that enable technology delivery without compromising resilience or trust

TL;DR

• Own the engineering and continuous improvement of technical security controls across the Nexus Operator environment
• Drive secure-by-design practices across infrastructure, cloud platforms, applications and technology releases
• Lead vulnerability management and technical security assessments, prioritising remediation based on risk
• Work with SOC and MSSP partners to strengthen monitoring, detection and incident response
• Assess technical security risks and provide clear recommendations to technology leadership
• Build evidence that demonstrates security controls are implemented and operating effectively

Why This Role Matters

• Protect the confidentiality, integrity, availability and resilience of critical technology
• Identify security weaknesses before they become operational or customer-impacting incidents
• Ensure new platforms and technology changes incorporate appropriate security controls from the outset
• Strengthen cyber defence by connecting engineering, vulnerability management and threat detection
• Give technology leaders clear technical insight into security risks and remediation priorities

What You Will Actually Do

• Design, implement and continuously improve security controls across cloud, infrastructure and application environments
• Drive security reviews for technology projects, integrations, architecture changes and production releases
• Own vulnerability identification, prioritisation and remediation tracking, validating that material weaknesses are effectively addressed
• Work with SOC and MSSP partners to investigate security events, improve detection capabilities and coordinate technical incident response
• Coordinate penetration testing and technical security assessments, translating findings into practical remediation actions
• Support security governance, audits and regulatory assessments by providing technical risk analysis, control evidence and subject-matter expertise

Examples of This Role in Practice

• A critical release contains an unresolved vulnerability: assess its exploitability and business impact, recommend mitigating controls and escalate when the residual risk exceeds agreed tolerances
• The SOC flags suspicious activity in production: investigate the technical indicators, coordinate containment and bring in the right specialists when escalation is required
• A new cloud service is being introduced: review its architecture, challenge control gaps and define the security requirements required before production
• A penetration test identifies a weakness across multiple applications: determine the underlying issue and work with engineering teams on sustainable remediation
• An auditor requests evidence that a key security control is operating effectively: provide traceable technical evidence and address gaps before they become repeat findings

What Will Help You Succeed

• Bring 8+ years of experience across cyber security, information security or security engineering
• Demonstrate strong hands-on experience across security architecture, cloud security, application security, vulnerability management and cyber defence
• Apply practical experience working with SOC or MSSP services and responding to significant security events
• Navigate regulated or high-availability technology environments with the judgment to identify and escalate material technical risks
• Communicate complex security issues clearly to engineers, technology leaders and non-security stakeholders
• Strengthen your technical expertise through certifications such as CISSP, CCSP, GIAC or equivalent, with payments or financial-services experience an advantage