Lead Security Engineer

WE ARE SHELL RECHARGE SOLUTIONS

We're on a mission to enable cleaner transportation for everyone, driving the way towards a lower-carbon future. We do this by designing and building solutions for charging electric vehicles at home, at work, and on-the-go.

With some of the most passionate and experienced minds on our side, we aim to make charging easy and accessible. Our award-winning services include charge points, a mobile app, and a charge card, providing access to 600,000 charge points in over 33 countries.

THIS IS HOW YOU WILL CONTRIBUTE

Your core accountabilities are to...

• Leads engineering and operational initiatives to improve or mitigate security challenges with a regional lens
• Acts as the primary contact and SME for vulnerability & threat management, as well as security monitoring and security Test.
• Investigates security breaches and manages the mitigation and post-mortem efforts
• The liaison between the IRM, Infosec, and Cyberdefence teams within Shell for security
• Drive secure-by-design principles for complicated solutions and instil a DevSecOps culture
• Research and evaluation of security solutions, tooling, and security operational controls to help Shell Recharge meet internal, external, policy, regulatory, and audit requirements
• Develop and maintain detailed security designs, tools, and configuration standards including elements of approved technologies and product sets
• Oversight of security testing activities
• Ability to determine and define business needs and balance requirements and decisions across different solutions and technology stacks

Success will be when you...

• Limit the overall security risk exposure of Shell Recharge Solutions

• Strike a balance between security and useability in engineering

• Demonstrate the ability to work as part of the development and project teams to ensure a secure-by-design approach and secure deployment

• Nurture an atmosphere that enables proactive engagement

Requirements

THE PERSON WE ARE LOOKING FOR

Has experience of…

• In a similarly sized organisation as a Security Engineering Team Lead dealing with multiple stakeholders across various regions and product lines

• Experience in translating and communicating a multitude of information security controls and regulatory requirements to the downstream teams

• Knowledge of existing security standards, best practices, and regulatory standards (ISO270K, NIST, GDPR, etc) and how to apply, meet, and evidence them

• Defining implementation plans and remediation activities

• Experience in influencing business risk decisions through debate and subject matter expert knowledge to maintain a balance between risk and reward

Is skilled at…

• Strong relationships, communication, and stakeholder management

• Working directly with Product Owners and Developers

• Translating security requirements into proactive deliverables

• Assessing security vulnerabilities on web applications and Cloud technologies

Is...

• Confident, approachable, and able to calmly stand your ground when appropriate

• Of an enabling nature and mindset to balance risk and reward

Has knowledge of…

• Knowledge of information security frameworks and standards such as OWASP, ASVS/MASVS, ISO27001/2, NIST, PCI DSS and their application into diverse environments

• Demonstrable understanding of modern application development and operational processes, including CICD pipelines, containerised workloads, micro-services, cloud platforms, and federated identity management

• A comprehensive understanding of threat modelling providing the Product Owners, risk owners, and business with a structured approach to identifying and prioritising potential threats

WHAT IS IN IT FOR YOU?

Working at Shell Recharge Solutions means working in a fun, fast-growing international company with big ambitions.

By joining us, you will:

• Contribute to a more sustainable future;
• Become an expert in e-mobility;
• Work in an open and diverse culture with colleagues from all over the world;
• Receive a competitive salary that fits your experience + yearly bonus;
• Receive a work from home budget to professionally equip your home office;
• Have 28 paid days of annual leave based on a 40 hour work week;
• Be able to spend up to 5 working days a year on volunteering;
• Develop your skills and expertise through several training sessions. Besides this, you will receive a personal training budget and set your annual goals with your personal development plan;
• Enjoy our monthly fun get-togethers (drinks), our annual winter and summer outing, and lots of other events or sport teams initiated by colleagues.

Please note: If you don't see yourself fully reflected in every job requirement listed on the posting above, we still encourage you to reach out and apply. Research has shown that women and underrepresented groups often only apply when they feel 100% qualified. We are committed to creating a more equitable, inclusive and diverse company and we strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientation, and life experiences to apply.