{"id":4230467,"url":"https://alion.io/job/dealview-technologies-security-engineer","title":"Security Engineer","company":{"id":3900542,"name":"Dealview Technologies","domain":"dealx.com","url":"https://alion.io/company/dealview-technologies-mu","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"worldwide","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Burp Suite","optional":false},{"name":"ChatGPT","optional":false},{"name":"Claude","optional":false},{"name":"DNS","optional":false},{"name":"Gemini","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OpenVAS","optional":false},{"name":"OWASP Dependency-Track","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Service Desk","optional":false},{"name":"Slack","optional":false},{"name":"SQL","optional":false},{"name":"STRIDE","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-11-05T00:00:00Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-13T09:36:48Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"StructureIt is a growing software consultancy in the capital markets, with offices in the UK, South Africa, Mauritius, India and New Zealand. We are trusted partners that help our customers in the Commercial Real Estate and Credit Markets in capital markets, insurance and telecoms leverage technology to unlock value throughout their business. Our mission is to deliver high-quality and robust software that quickly solves customer pain points while keeping them in control throughout the engagement.\nWhy this role exists\nWe are a financial consultancy working for an industry-leading global financial data company. Our staff and our coding agents use AI every day, and the systems we build for clients now include language models and agents. Security has to keep up with both.\nYou are the security engineer who covers all of it. You penetration-test the systems we build and our own estate, you secure how we use AI, and you run the controls that protect our staff in the UK, South Africa and Mauritius. You design the controls, test them yourself and fix what you find.\nThe role sits in our IT Operations team, so you also engineer and support the IT estate itself: firewalls and Azure, accounts and laptops, and the service desk. Part of each week goes to that work. We keep meetings to a minimum and give you the freedom to do it.\nWhat you'll own\nPenetration testing\nYou test our own estate on a schedule and after major changes. You also work with our delivery teams to build penetration tests for the systems they develop, starting from a threat model and running in the build pipeline. You coordinate the external penetration and phishing tests and track every finding to closure. Your work means the external testers find less each time.\nAI security\nYou set the controls for how our staff and agents use AI: approved tools and models, agent permissions and keys, client data kept in approved tools, and third-party skills and MCP servers checked before anyone installs them. Where a system we build uses models or agents, you test it for prompt injection, data leakage and excessive agency. You use AI yourself too, and build agents and skills that run security checks for you and for the delivery teams.\nIdentity and device security\nYou administer Microsoft Entra ID: users, groups, Conditional Access policies, and SSO and SCIM integrations with our SaaS applications. You design the Conditional Access policies as well as maintain them. You manage device compliance with Intune and Defender for Endpoint, including BYOD checks and remediation of non-compliant devices.\nSecurity operations\nYou investigate security alerts and incidents, such as Defender detections, unapproved software and unmanaged devices, and record what you found. You threat-model our infrastructure, SaaS integrations and changes with MITRE ATT&CK, and define the mitigations and detections. You run vulnerability management with OpenVAS/Greenbone and Dependency-Track. You implement and evidence our ISO 27001 controls, and you complete client security questionnaires.\nIT engineering\nYou maintain our Palo Alto firewalls, GlobalProtect VPN and Zscaler Private Access, including PAN-OS upgrades. You maintain our Azure infrastructure: virtual networks, private DNS zones, Key Vault, SQL access and virtual machine lifecycle. You raise and document a change request for every infrastructure and configuration change, and you write and maintain scripts that automate repeat tasks.\nIT support\nYou resolve service requests and incidents in Jira Service Management within the agreed SLAs. You run joiners, movers and leavers: account creation, role changes, access removal on the last working day, and evidence capture. You provision, configure, wipe and replace Windows and macOS laptops, and keep the asset records current. You manage SaaS licences and access across Google Workspace, Microsoft 365, Atlassian, Slack and our AI tools.\nWhat you won't own\nThe compliance programme. Governance, policy and the audit programme sit with our Chief Compliance Officer.\nThe code. Our delivery teams own the systems they build and fix what you find.\nWho you might be\nYour job title matters less to us than the security work you have done. You might be:\nA penetration tester who wants to run controls as well as test them.\nA Microsoft security engineer who has penetration-tested the estate they secured.\nAn application security engineer who wants to own infrastructure security as well.\nAn infrastructure engineer whose main job for the last three years has been security.\nWhatever the background, you have run a penetration test and written the report, handled a real incident, and designed a control that you then operated. You are also happy to do hands-on IT engineering and support alongside the security work. This is a security role first, though. If security was a side task in your last IT support or sysadmin role, this one will not suit you.\nSkills and experience\nAt least five years in IT, infrastructure or software, with three or more in a role where security was the main job.\nPenetration testing of web applications, APIs, internal networks, Active Directory and Azure, with tools such as Burp Suite or OWASP ZAP.\nThreat modelling with STRIDE or MITRE ATT&CK, and working knowledge of the OWASP Top 10 for LLM Applications.\nHands-on administration of Microsoft Entra ID and Active Directory, including Conditional Access policies you designed and enforced, and SSO (SAML/OIDC) and SCIM provisioning.\nMicrosoft Intune and Defender for Endpoint, and support of Windows, macOS and Linux endpoints.\nMicrosoft Azure infrastructure (networking, DNS, Key Vault), firewalls, and site-to-site and client VPNs.\nIncident investigation and response, and vulnerability management through to closure.\nDaily use of AI tools such as Claude, ChatGPT or Gemini, and scripting in PowerShell, Bash or Python.\nWork from a ticketing system with SLAs, such as Jira Service Management, following documented processes and capturing evidence for each task.\nISO 27001 or a similar control framework, and clear writing for tickets, change requests and audit evidence.\nAdvantageous: OSCP, CREST CRT or PNPT. CISSP, CISM or CCSP, or a Microsoft security or Azure certification such as SC-300 or AZ-104. Digital forensics. Palo Alto PAN-OS and GlobalProtect. Zscaler Private Access. Google Workspace administration. AWS. Testing LLM applications or agents in production. Building AI agents.\nThe interview includes a practical exercise. You threat-model and test a deliberately vulnerable web application with an LLM feature, using AI tools if you want to, and you walk us through an incident you handled.\nHow we'll measure success\nOver the first 12 months, success looks like:\nthe estate penetration-tested on an agreed schedule, with every finding tracked to closure\neach delivered system carrying its own penetration tests, including LLM tests where relevant\nfewer findings in each external test, and none repeated from the last\nevery AI tool in use approved and connected to Entra ID\nservice requests and incidents resolved within the agreed SLAs, and asset records that match the devices in use\nand every device compliant, every leaver's access removed on their last day, and ISO 27001 evidence kept current\nTargets are agreed with you in your first month, against a baseline you have measured.","description_format":"text","description_chars":7355,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Providers & Datasets","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-11-13T09:36:48Z"}],"visa":[],"liveness":{"score":73,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.811,"p_room":0.9,"age_days":8,"expected_fill_days":23,"reasons":["conf:1","win:mid","comp:remote"],"computed_at":"2026-11-13T11:17:18Z"},"pay":null,"html_url":"https://alion.io/job/dealview-technologies-security-engineer","json_url":"https://alion.io/job/dealview-technologies-security-engineer.json","meta":{"generated_at":"2026-11-13T11:17:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22750,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3900542},"rest":"https://alion.io/mcp/rest/get_company?id=3900542"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdealview-technologies-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdealview-technologies-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdealview-technologies-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dealview-technologies-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdealview-technologies-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4230467}},{"tool":"search_jobs","arguments":{"company":"dealx.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4230467},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}