BAT is evolving at pace - truly like no other organisation.
To achieve the ambition, we have set for ourselves, we are looking for colleagues who are ready to live our ethos every day. Come be a part of this journey!
BAT POLAND IS LOOKING FOR A SECURITY ENGINEER (AUTOMATION & INTEGRATION)
JOB TITLE:Security Engineer (Automation & Integration)
SENIORITY LEVEL: Experienced professional
FUNCTION: Technology / Cyber Security
TYPE OF CONTRACT: Permanent
START DATE: As soon as possible
LOCATION: Warsaw, Poland
ROLE POSITIONING AND OBJECTIVES
What are the key objectives and expectations from this role?
Reporting to the Global Head of Security Architecture & Engineering and partnering with the broader Digital Business Solutions (DBS) organization, you will be responsible for in building, maintaining a continuous, and balanced security automation pipeline and to improve the efficiency, effectiveness and accuracy of detection, response capabilities and reducing manual tasks to enable the Cyber Security organization to achieve best-in-class protection.
You will team up with teammates with Cyber Security and Technology as well as partners to deliver new solutions that align with the growth strategy of the BAT business. As well as maintaining/evolving existing ones, collaborating closely with the colleagues in the Architecture & Engineering team, to build a cohesive level protection across Security Domains and IT platforms.
You will provide subject matter expertise on:
- Experience developing on the ServiceNow platform including the creation and/or customization of the core applications such as CMDB, IGA, GRC, SIR, etc.
- Strong knowledge of the ServiceNow Platform as a product, modules, data model, tables, and capabilities.
- Experience administering a ServiceNow instance including the delegation of groups, change management, workflows, business rules, UI actions, UI policies, ACLs/roles/groups, and service catalog items.
- Relational database expertise in relation to an enterprise software system (Postgres, MS SQL).
- Familiar with REST API best practices and usage.
- Excellent written and verbal communications skills.
- Ability to communicate effectively with a technical and non-technical audience.
What is the direct impact of this role on the team or organization?
To provide engineering proficiency to maximize the value from technology innovation in a way that manages the cyber security risk and helps increase compliance, minimizing business disruptions from potential cyber-attacks and data breaches.
Reports to: Global Head of Security Architecture & Engineering
Reporting Level: no direct reports
Geographic Scope: Global
WHAT YOU WILL BE ACCOUNTABLE FOR
- Analyze the technical development requirements and develop integrations between the ServiceNow modules and 3rd-party tools and APIs used by the Cybersecurity teams.
- Configure ServiceNow workflows and implement standard processes in coding and design as per the ServiceNow standards.
- Collaborate with ServiceNow Platform team to ensure quality and stability of integrations.
- Provide checkouts during ServiceNow module and platform upgrades.
- Find opportunities to automate workflows/processes related to security events through ServiceNow or SOAR playbooks
- Manage the ongoing improvement to the organization's case management system to decrease response times, increase effectiveness and streamline security operations
- Assist with the design, engineering, deployment, and maintenance of custom automation tools (primarily in Python, and PowerShell)
- Develop dashboards and metrics within the organization's case management system.
- Maintain and improve the team's products, infrastructure, and technology stack.
- Develop and maintain documentation related to the automation of workflows related to detection/response procedures for security events.
- Contributing to the development and implementation of cloud security policies, standards, and procedures. Participating in security governance initiatives, risk assessments, and security incident response planning.
ESSENTIAL EXPERIENCE, SKILLS, AND KNOWLEDGE
- Experience in designing and implementing secure integration and automation solutions.
- Hands-on experience with integration platforms, middleware, and automation tools.
- Degree or equivalent in Computer Science
- Experience in working with APIs, web services, and message queuing systems.
- Knowledge of various integration patterns and best practices.
- Familiarity with industry-standard integration frameworks and methodologies.
- Strong understanding of cybersecurity principles and best practices.
- Proficiency in securing data transmissions and communications between systems.
- Knowledge of authentication and authorization mechanisms in an integration context.
- Experience with identity and access management (IAM) systems and protocols.
- Understanding of encryption and cryptographic techniques.
- Proficiency in secure coding practices and vulnerability management.
- Knowledge of security standards and compliance requirements relevant to integration and automation processes.
- In-depth understanding of integration architectures and technologies, such as Enterprise Service Bus (ESB), API gateways, and message brokers.
- Familiarity with automation tools and technologies, such as Robotic Process Automation (RPA) and workflow management systems.
- Knowledge of cloud-based integration platforms and security considerations in cloud environments.
- Understanding of threat modeling and risk assessment techniques specific to integration and automation processes.
- Knowledge of secure data transformation and data mapping techniques.
- Awareness of emerging trends and technologies in integration and automation security.
- Certified Information Systems Security Professional (CISSP)
- Scaled Agile Framework (SAFe 5 or higher)
WE ARE BAT
At BAT we are committed to our Purpose of creating A Better Tomorrow. This is what drives our people and our passion for innovation. See what is possible for you at BAT.
- Global Top Employer with 53,000 BAT people across more than 180 markets
- Brands sold in over 200 markets, made in 44 factories in 42 countries
- Newly established Tech Hubs building world-class capabilities for innovation in 4 strategic locations
- Diversity leader in the Financial Times and International Women’s Day Best Practice winner
- Seal Award winner – one of 50 most sustainable companies
BELONGING, ACHIEVING, TOGETHER
Collaboration, diversity, and teamwork underpin everything we do here at BAT. We know that collaborating with colleagues from different backgrounds is what makes us stronger and best prepared to meet our business goals. Come bring your difference!