Data Security Engineer - Cryptography

Would you like to be a part of our team as we move towards a fossil freedom?

For the Vattenfall IT we are now looking for an experienced and ambitious Data Security Engineer who will enjoy a fast-developing international working environment. 

Our environment 

Because of fast growing security developments and threats, we want to enhance our security organization by increasing operational security in our delivery units. To realize this ambition, we set up a technically oriented Security Operations Team (SecOps) focusing on implementing security related improvements for the whole IT landscape.

The SecOps department is an international team of IT engineering colleagues representing different competence areas. We follow security trends, identify vulnerabilities and security findings and above all, focus on implementing improvements. One of the key competences within SecOps services is data encryption and key management. In order to provide high quality services within Vattenfall‘s IT landscape we continue development of this area. As a result we keep our team growing and we’re looking for a new colleague who will help us in this journey.

Your Job as Data Security Engineer

We are looking for a talented and experienced Data Security Engineer as an expert in the areas of encryption and key management. In this new position, you will work on improving our key management infrastructure consisting of HSMs and an enterprise key management system. Your tasks involve designing, implementing, and managing cryptographic key management services, applying encryption technologies, and working on key management processes. You will work with various teams to ensure that encryption standards and processes are maintained, and that cryptographic keys are securely managed and protected throughout their lifecycle. 

Your key activities will be:

• Define and implement encryption and key management processes to ensure the security of data in transit and at rest

• Develop and maintain cryptographic key management policies and procedures

• Collaborate with cross-functional teams to integrate cryptographic systems into applications, platforms, and infrastructure

• Operate, manage and improve the existing cryptographic key management core infrastructure

• Define and maintain Hardware Security Module (HSM) security policies and procedures

• Monitor and troubleshoot issues related to cryptographic systems and key management processes

• Develop, test and maintain disaster recovery plans for cryptographic systems and key management processes

• Stay informed about recent developments on new cryptographic technologies and assess their applicability to the organization

• Provide technical guidance and training to other team members on cryptographic systems and key management processes

• Participate in audits and compliance assessments related to cryptographic systems and key management processes

You will also contribute in:

• Participation in SecOps daily activities, projects, initiatives

• Implementation of security improvements and mitigations

• Helping to define security baselines and initiate changes

• Support the line organization with execution and broaden IT Security knowledge