Cyber Security Engineer

Welcome to Gallagher – a global leader in insurance, risk management, and consulting services. With a growing team of more than 45,000 professionals worldwide, we empower businesses, communities, and individuals to thrive. At Gallagher, you can build a career whether it’s with our brokerage division, our benefits and HR consulting division, or our corporate team. Experience The Gallagher Way, a culture fueled by shared values and a collective passion for excellence. Join one of our dynamic teams, where you'll play a pivotal role in shaping Gallagher's future and unlocking unparalleled opportunities for both clients and yourself.

We believe that every candidate brings something special to the table, including you So, even if you feel that you’re close but not an exact match, we encourage you to apply.

The  Security Engineer, is part of the operations security team reporting to the APAC IT Security Manager, and will provide local project management and 3rd level support of the GCIS security program, its products and appliances. In response to security issues and incident this role will also work under the guidance of the global Security Operations Centre (SOC). This role will hold privileged cloud and system accounts and proactively secure systems, code, applications and data.

CONFIGURATION

Assisting global GCIS team and in co-ordination and communication with division stakeholders, performing

• Security architectural reviews, and
• Configuration and Management of GSIC Security Appliances in Region:

• Web Application Firewall, Qualys Vulnerability Scanners, Data Loss Prevention, Endpoint Detection & Response, Intrusion Preventions Systems, AJG Azure security features, SIEM Aggregators, Web Proxy, InTune endpoint policies, Email Security and Perimeter Networks, CASB etc,
• Configuration and Management of Divisional enclaves in Region:
• Cloud security features (e.g. Web Application Firewall, security groups, CIAM integration), Data Loss Prevention, Endpoint Detection & Response, Intrusion Preventions Systems

OPERATIONS

• Assist the APAC IT Security Manager in support of Gallagher’s hosted client systems (including all Azure & AWS cloud environments):
  • Ensuring reactive compliance:
• Responding to internal security alerts (e.g. SOC alerts etc)
• Responding to Managed Service Providers alerts (e.g. triaged Crowdstrike events)
• Monitoring security events, capacity and access logs to satisfy contractual requirements

• Through formal change processes, proactively:
• Mitigating vulnerability findings
• Assisting with internal and external audits.
• Liaising with outsourced contract staff, suppliers and vendors to implement security patching of systems

• Performance of Ad-Hoc vulnerability scans and penetration tests as required and post changes.

INVESTIGATIONS

• Providing 3rd level security expertise to client issues believed to be security related
• Undertaking investigations as required. These may include assisting with forensics, manager e-discoveries, level 3 SOC incidents.
• Assist as required for M&A activities and risk assessments.

STAKEHOLDER ENGAGEMENT

• Assisting APAC Cloud Security Manager in secure configuration of AJG Azure tenancy APAC instances and subscriptions

• Working with APAC Division’s Infrastructure teams in peer review and co-ordination of security operation changes in region:
  • Directing and applying vendor supplied patches
  • Configuration changes to appliances and systems

• Working with global Project Managers to ensure GCIS projects are successful:
• Validating global assumptions - business/technical requirements
• Redefining roadmaps and schedules, taking into account GCIS and divisional resource constraints
• Co-ordinating local meetings with the appropriate subject matter experts and stakeholders
• Confirming divisional User Acceptance Testing is signed-off
• Ensure training workshops, stakeholder and end user communications are in included
• Ensure successful handover of project deliverables to operations.

• Bachelor's degree in computer science, information systems.
• 8-year experience in information security,
• Strong knowledge of security frameworks and standards such as ISO 27001, Australian Government PSPF / ISM.
• Wide experience in security technologies
• Proven experience in security incident investigations & problem solving.
• Familiarity with cloud-based storage and computing platforms such as Azure, AWS, and GCP
• Demonstrated experience in mentoring junior staff.
• Very good stakeholder management skills are required to schedule and prioritise with the multiple IT teams across all APAC divisions.
• Experience in executive report writing – e.g. manager e-discovery investigations summaries
• Desirable accreditations: CISSP, CISM or CCSP

Security Clearance

Being an Australian citizen and vetted to the Baseline Security Clearance level is a mandatory requirement for the position. Gallagher can arrange the application but failure to receive the clearance will mean forfeiting the role.

#LI-NP1

We value inclusion and diversity

Inclusion and diversity (I&D) is a core part of our business, and it’s embedded into the fabric of our organization. For more than 95 years, Gallagher has led with a commitment to sustainability and to support the communities where we live and work.

Gallagher embraces our employees’ diverse identities, experiences and talents, allowing us to better serve our clients and communities. We see inclusion as a conscious commitment and diversity as a vital strength. By embracing diversity in all its forms, we live out The Gallagher Way to its fullest.

Gallagher believes that all persons are entitled to equal employment opportunity and prohibits any form of discrimination by its managers, employees, vendors or customers based on race, color, religion, creed, gender (including pregnancy status), sexual orientation, gender identity (which includes transgender and other gender non-conforming individuals), gender expression, hair expression, marital status, parental status, age, national origin, ancestry, disability, medical condition, genetic information, veteran or military status, citizenship status, or any other characteristic protected (herein referred to as “protected characteristics”) by applicable federal, state, or local laws.

Equal employment opportunity will be extended in all aspects of the employer-employee relationship, including, but not limited to, recruitment, hiring, training, promotion, transfer, demotion, compensation, benefits, layoff, and termination. In addition, Gallagher will make reasonable accommodations to known physical or mental limitations of an otherwise qualified person with a disability, unless the accommodation would impose an undue hardship on the operation of our business.