Security Engineering Team Lead

How You’ll Support Our Mission

ESO’s teams are growing, and our software is in demand globally by firefighters, paramedics, hospitals and governments. To meet this demand, we are building an industry-leading cyber security team in Belfast to protect our customers and data from a variety of fast moving and constantly evolving threats.

We are looking for a Security Engineering Team Leader to join our Belfast team, working alongside teams in Copenhagen, Czechia and the United States. Work alongside our fire, hospital and EMS Engineering teams to secure our mission-critical applications. These applications are used to help our customers go about their daily job of protecting their communities and saving lives.

You’ll lead our team of Security Engineers, supporting and directing our Product & Technology team to ensure our products and systems are designed and implemented with a priority on security. You’ll collaborate closely with our Product & Technology teams, contributing to application architecture and steering system implementation. Your teams work will draw on principles like defence in depth and leverage practices such as threat modelling and zero trust across a multi-cloud environment - with focus on best practice, security by design and implementation of standards and frameworks across our portfolio.

Our Security Engineers have a high degree of autonomy, and are part of a high functioning, motivated and forward-thinking team. You have the chance to join a diverse, growing and passionate team, working on critical products, whilst being supported with training opportunities and mentoring.

What You’ll Be Doing – the day to day

• Lead our team of Security Engineers – assisting with decision making and solution analysis, and enabling them to deliver security consulting to the wider business

• Work directly with, and provide escalated support and guidance to, our Product & Technology teams to assist in how our platform is built and how our applications behave; supporting everything from the security of our users inside our products to how our applications connect to the Internet.

• Have significant impact on the security of our systems that are used by thousands of fire fighters, paramedics and hospitals worldwide.

• Be a key part of our cyber security team, with demonstrable impact on the security of our systems and applications. 

• Help our teams to model threats using the STRIDE model, against new designs, ensuring appropriate protection and controls are in place.

• Make a difference by mitigating vulnerabilities across our systems, helping developers to produce secure code and evaluating new next-gen security technologies.

• Respond to security and compliance issues generated via analysis or automated tools.

• Work collaboratively cross-team, to impart your expertise across the organisation.

• Be in the detail, working shoulder-to-shoulder with our technology teams.

Who You Are - some of the essential things required to be successful in the role

• At least 5 years’ experience in securing software or infrastructure in cloud platforms (e.g. Microsoft Azure, AWS, GCP)

• Your experience should include;

• Securing systems in line with ‘Well Architected Frameworks’ e.g. Azure Well Architected Framework

• Network experience – whether designing and building, managing or troubleshooting – you should have experience and confidence in your networking knowledge

• Applying security to networks, hosts, web applications and cloud native deployments

• Working with toolsets from one or more of: asset management, vulnerability management, firewalls, SIEM, PAM, IDS/IPS, EDR/XDR, DLP, SWG, WAF, CSPM, CNAPP

• A solid understanding and ideally experience in the design, implementation or run of one or more of: SAST / DAST / IAST / RASP

You should also:

• Having knowledge of Continuous Integration / Continuous Deployment best practices, and securing pipelines

• Understand current attack tactics, techniques and procedures along with the use of MITRE Attack framework and associated MITRE security research

• Be inquisitive, have a passion for what you do and understanding how your work impacts and contributes ESO’s success

Who You Are – it’s desirable if you have any of the following

• Exposure to Infrastructure as Code and Azure native technologies

• Experience with threat modelling, NIST and CIS frameworks

• Knowledge of application security standards such as OWASP Top 10, SANS / CWE 25

Benefits & Perks! You will have fantastic benefits at ESO including but not limited to;

• Life insurance (4 x base salary)

• Income protection insurance

• A generous pension contribution

• Private medical insurance including optical and dental

• A health cash plan

• Modern City Centre office and a flexible hybrid working policy

• AwardCo Recognition Program

• Enhanced paternity leave and pay, enhanced adoptive pay, enhanced maternity pay - 12 weeks full pay after 6 months' service.

• Enhanced short and long-term sick pay

• 25 days holiday which increases year on year until you reach 5 years of service + 14 additional days

About ESO

ESO is a fast-paced, growing data, technology and research company passionate about improving community health and safety through the power of data. We pioneer innovative, user-friendly software to meet the changing needs of today’s EMS agencies, fire departments, and hospitals. We serve thousands of customers out of our offices across the US, Canada and Northern Ireland.

Are you ready to Make a Difference?

ESO is committed to creating a diverse and inclusive work environment and is proud to be an equal opportunity employer. We invite you to consider opportunities at ESO regardless of your gender; gender identity; gender reassignment; age; religious or similar philosophical belief; race; national origin; political opinion; sexual orientation; disability; marital or civil partnership status or other non-merit factor.

Our Equal Opportunity Statement of Policy for Northern Ireland is available on request.

Applicant Privacy Notice – please click here to review the privacy policy which details how your data is collected, used and protected.