Senior Security Engineer

About The Company

Inchcape is the leading global automotive distributor operating in more than 40 markets. We partner with some of the biggest brands in the business to power better mobility today and in the future.

Our diverse global team of over 18,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We're a dynamic and fast-growing business, driving the transformation of our industry and redefining tomorrow

The Digital Delivery Centres accelerate Inchcape's digital journey by positively impacting the business and its customers through innovative and essential technological solutions.

Through our top talents, we support the mobility of millions of people globally through the power of digital technology.

Purpose of Role:

As a Senior Security Engineer, you will play a key role in proactively enhancing the organization's security capabilities by leading improvements in security tools, automation, and processes. This role is focused on continuous improvement, ensuring that security operations are more efficient, automated, and resilient against emerging threats. You will work closely with the SOC Team, and cross-functional teams to develop and implement advanced security solutions, optimize vulnerability management, and drive automation for security operations. Additionally, you will take a leadership role during P1/P0 operational incidents and security incidents (when required), coordinating response efforts and ensuring stakeholders are kept informed throughout the process.

Job Role and Responsibilities:

Platform and Services

• Oversee and manage all security tools, ensuring optimal performance and integration.
• Work with Security Tools' CSM (Security Vendors) to ensure we are getting the most out of the Tools.
• Design and implement automation for security incident handling and manual security tasks.
• Play a leadership role in P1/P0 security operational incidents, including:
• Coordinating incident response efforts across security, IT, and relevant teams.
• Ensuring timely and clear communication with stakeholders on impact, progress, and resolution.
• Driving post-incident reviews to identify areas for improvement and implement preventive measures.
• Collaborate with the GRC team to ensure security risks related to controls are addressed effectively and in a timely manner, ensuring alignment with compliance and governance standards.
• Proactively research and implement new security technologies and best practices to strengthen security posture.
• Collaborate with the SOC team to enhance automated threat detection, alerting, and response.
• Automate security service requests such as whitelisting, blocking, and other access controls.
• Assist in handling security incidents when required, working closely with SOC Team.
• Provide mentorship and guidance to L1 and L2 Security Engineers.
• Work closely with Cybersecurity Service Manager in managing Projects and Continuous Improvement Backlogs.
• Continuously assess and improve security operations and response processes.
• Stay updated on emerging security threats and technologies.

Vulnerability Management

• Configure and optimize vulnerability scans for the Inchcape network, ensuring comprehensive coverage and minimal false positives.
• Develop and maintain advanced vulnerability reporting & dashboards, providing insights to executives and IT teams.
• Assess and prioritize new vulnerabilities based on business impact, exploitability, and risk level.
• Act as the primary coordinator with wider IT teams, ensuring timely remediation and implementing automation where possible.
• Define and refine vulnerability management policies and workflows to improve efficiency and effectiveness.

Qualifications:

• Bachelor's degree in computer science, Information technology, or related field.
• 5+ years of experience in cybersecurity operations, engineering, or a related role.
• Strong knowledge of security tools, SIEM, SOAR, firewalls, EDR, and vulnerability management platforms.
• Experience with scripting and automation (Python, PowerShell, Bash, Power Automate, Power BI, etc.).
• Deep understanding of incident response, threat detection, and risk assessment.
• Familiarity with cloud security, network security, and endpoint security solutions.
• Relevant certifications (e.g., CISSP, CEH, OSCP, GIAC) are a plus.
• Excellent analytical and problem-solving skills
• Strong communication and leadership capabilities

Realise your potential

• Build a brilliant career, where you're encouraged and supported to fulfil your ambition, mentored by excellent managers.
• Explore exciting and rewarding career pathways, with regular promotion and performance reviews to help you progress.
• Develop your expertise and upgrade your skills with continuous training in the latest tech advancements.

If you have the skills, passion, and drive to thrive in this role, and you're ready to grow your career with a dynamic global team in the digital space, we want to hear from you