Security Engineer

## Join Us At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact. The Security Engineer (TbD) processes all assigned security analyses and completes all Trust by Design activities in the Cybersecurity area, following local and global procedures, with the aim of protecting customer and employee data and maintaining the integrity of the company's IT infrastructure. Knows and follows the necessary procedures to resolve team-specific activities and maintains good collaboration with all departments within the company, both local and global. ## What you’ll do Main Responsibilities: • Processes requests for assessment, from the perspective of cybersecurity policies and procedures, of the organization's systems and products, complies with the assessment process, proposes mitigation methods, communicates and identifies information security risks following the procedures applicable to the Trust By Design area, taking into account business objectives • Identifies information security risks following the applicable procedures for the formal registration of identified risks and action plans agreed with the remediation manager in the business area • Analyzes company-specific technologies in the IT and network area and studies information security solutions in production, applicable work procedures, in order to understand their impact on the architecture of existing technical solutions • Evaluates the security of client systems and applications and follows up on the remediation of identified security breaches • Maintains the list of evaluated systems and identified risks and periodically evaluates risk mitigation measures together with system owners • Completes Security analyses, Security memos and risk register • Understands the Security requirements applicable to the essential security areas, user management, logging and monitoring, API Security, Cloud Security, VOIP Security, Mobile Application Security and Web Security, Network and Telco Equipment Security • Understands and can adapt to the Agile delivery workflow in the DevSecOps area • Cooperates with the responsible departments in order to monitor the remediation of vulnerabilities in information systems, using specific procedures: o modifying the application code or developing new functionalities o reconfiguration o installing security patches/software upgrades, o implementing new controls to reduce risk, etc. ## Who you are Skills, knowledge and experience: • Vulnerability management • Risk management • Information security • User management Note: Experience takes precedence over studies and other training courses. • Projects: measurement and control skills, planning, • Team: teamwork skills, timely and concise information • Personal profile: able to set priorities, problem-solving orientation, follow-up on deadlines, compliance with rules and procedures. • Others: Word processing, spreadsheets, graphics, programming, English, written communication. Experience in using tools for secure software development (e.g. SAST, DAST, IAST, SCA) Knowledge of types of vulnerabilities and how to mitigate risks in applications and infrastructure Required technical/professional certifications: • University degree • Minimum 3 years of experience in IT/telecom fields • Good knowledge and understanding of IT communication protocols • Knowledge in administering Windows/Linux operating systems • Knowledge of SQL/Oracle databases • Knowledge of ISO27001 standard Other training courses and certifications (special knowledge required, e.g. driver's license, labor...