Security Analyst / Security Engineer

Azure IaaS Cloud Architect - Azure Networking (Primary), SAP Migration, Landing Zones & FinOpsRole SummaryWe are seeking a Senior Azure IaaS Cloud Architect with Azure Networking as the primary skill, complemented by deep SAP on Azure IaaS experience and strong FinOps...

A variety of soft skills and experience may be required for the following role Please ensure you check the overview below carefully.

• BitBake / Yocto / OpenEmbedded
• Linux kernel hardening internals, such as init on alloc, init on free, integrity measurement architecture, integrity policy enforcement, SELinux or another mandatory access control mechanism
• A strong understanding of Unix DAC (Discrentionary Access Controls) and their impact on the security model upheld by dbus and other daemons
• Experience with dm-verity, secure boot implementations and a strong understanding of signed, authenticated code execution in both a working and theory context
• Strong ability to rapidly learn, understand adopt new functionality or code
• Understanding of SBOM's, their generation, and copyleft licence compliance
• You understand the basics on PKCS#11 and understand how it can be leveraged to create secure production builds using offline HSM backed signing keys
• A security driven mindset, where you could comfortably explain a broad range of security architectural concepts, and actively work to propose new defence in depth improvements
• You understand exploit mitigations, such as CFI, SCS and taking advantage of hardware features such as BTI, PAC and MTE in Arm based platforms or equivalent
• You have a real world understanding of offensive exploitation, and can proactively advise and foresee architectural issues in existing and under development platforms
• xhkmmrq You have a good understanding of how hardware based architectural decisions and features can impact and improve the security of your OS, such as TEE's, ARM SMMUv3, problematic SDIO usage, isolation of firmware and peripheral and input/output authentication UK based with occasional travel to Central London and Harlow