IT Engineer Security Senior

Overview

Keysight is at the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~16,800 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do.

Our award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.

Responsibilities

• 7+ years of relevant experience in cybersecurity, cybersecurity compliance, security assurance, technology risk, or security control assessment.
• Hands-on experience assessing technical cybersecurity controls alongside reviewing policies, procedures, or audit documentation.
• Demonstrate experience assessing organizations against UK Cyber Essentials Plus, CIS Controls, NIST CSF and/or NIST SP 800-series requirements.
• Strong understanding of vulnerability management, patch management, endpoint security, IAM/PAM, MFA, network security, secure configuration, logging/monitoring, incident response, encryption, and cloud security controls.
• Ability to review security configurations, vulnerability reports, security dashboards, architecture diagrams, access-control evidence, and other technical artifacts to determine whether security controls are effectively implemented.
• Experience conducting cybersecurity gap assessments, control maturity assessments, risk assessments, remediation tracking, and certification-readiness activities.
• Ability to engage effectively with SOC, IAM, Network, Cloud, Infrastructure, Endpoint, Vulnerability Management, and Security Engineering teams.
• Experience translating technical vulnerabilities and control deficiencies into business risk and actionable remediation requirements.
• Experience with ISO 27001, PCI DSS, TISAX, SOC 2, SOX, or similar assurance frameworks would be advantageous.
• Relevant cybersecurity certifications such as CISSP, CISM, CRISC, Security+, ISO 27001 Lead Auditor/Implementer, or equivalent are preferred.
• Excellent verbal and written communication skills and the ability to interact professionally and fluently with a diverse group
• Able to present information clearly, concisely, accurately and in a manner that promotes understanding, both in writing and verbally
• Ability and willingness to research unfamiliar information
• Assist in evolving team processes and driving continuous improvement by continuously seeking out and applying feedback.
• Can-do attitude and ability to deliver under tight timeline and high pressure
  
  

• Bachelors or Masters Degree or University Degree or equivalent in IT, Business Informatics or related fields
• Relevant cybersecurity certifications such as CISSP, CISM, CRISC, Security+, ISO 27001 Lead Auditor/Implementer, or equivalent are preferred.
• Strong presentation and communication skills
• Understanding of the definition, implementation and assessment of IT and business controls
• Ability to work independently, willingness to constantly learn and stay on top of the ever-changing landscape of security & compliance requirements