Infomedia/SimplePart is seeking a Security Engineer to join our Network and Security team. This role is responsible for the day-to-day operational security of our automotive SaaS platform, which serves approximately 2,750 dealer websites across 25+ OEM brands. The Security Engineer will own vulnerability management, compliance task execution, incident monitoring and response, and will serve as a key contributor to maintaining our PCI DSS, ISO 27001, and SOC 2 compliance posture. This is a hands-on, execution-focused role that requires strong technical fundamentals, attention to detail, and the ability to work independently while collaborating effectively with cross-functional teams.

Core Responsibilities

Incident Monitoring and On-Call

• Participate in a 24/7 PagerDuty on-call rotation on a weekly rotating basis with the security team.
• Investigate, triage, and respond to all alerts received during on-call shifts, escalating to the appropriate teams as needed.
• Perform daily review and analysis of security alerts and logs across all monitoring platforms.
• Monitor and remediate alerts and findings from Microsoft Defender.

Vulnerability Management

• Own and manage internal and external vulnerability scanning programs (Tenable, Qualys, Veracode, and related tooling).
• Analyze scan results, prioritize findings by severity and business impact, and develop detailed remediation plans.
• Coordinate with infrastructure, development, and operations teams to schedule and execute remediation activities.
• Ensure the environment is patched monthly and proactively schedule patching for critical systems that require coordination with other teams.
• For vulnerabilities that cannot be remediated within designated timeframes, document justification and enter findings into the risk register with appropriate compensating controls.
• Maintain the systems inventory sheet, ensuring all asset information is accurate and current.

Compliance and Audit

• Take ownership of all PCI DSS compliance tasks on a monthly, quarterly, semi-annual, and annual basis.
• Serve as the primary point of contact for completing internal PCI DSS tasks and act as the lead during the annual PCI DSS audit.
• Maintain working familiarity with ISO 27001 requirements and serve as the point person for related compliance tasks.
• Support SOC 2 audit preparation and serve as a contributor or lead for compliance audit activities as needed.
• Develop, implement, and help maintain the company’s cyber and information security policies, procedures, and standards to ensure the confidentiality, integrity, and availability of digital assets.

Infrastructure Support

• Manage access requests, ensuring access is provisioned and deprovisioned accurately and in accordance with policy.
• Maintain SFTP configurations in accordance with security best practices.
• Demonstrate a basic understanding of firewall rules and networking configuration to support audit evidence and security best practices.

Required Qualifications

• 1-3 years of experience in information security, cybersecurity, or IT security operations.
• Hands-on experience with vulnerability scanning tools (Tenable, Nessus, Qualys, or equivalent).
• Working knowledge of PCI DSS requirements; direct experience with PCI DSS audit preparation and task execution strongly preferred.
• Familiarity with compliance frameworks including ISO 27001 and SOC 2.
• Experience with endpoint detection and response (EDR) tools such as Microsoft Defender.
• Understanding of RBAC principles, SFTP security, and basic networking and firewall concepts.
• Experience with patching processes and change management in a multi-server environment.
• Strong written and verbal communication skills with the ability to document findings clearly.
• Ability to work independently, conduct thorough technical research, and manage multiple priorities.
• Willingness to participate in a 24/7 on-call rotation.

Position Purpose:

• Serve as a Senior Full Stack Developer responsible for designing and delivering high-quality features
• Hands-on development role while contributing to and influencing the overall technical direction of the product.
• Take ownership of feature technical design across the full stack, including cloud infrastructure.
• Mentor and support junior engineers, fostering best practices and continuous improvement within the team.

Key Responsibilities: 

• Design and develop product software using appropriate modelling techniques, adhering to agreed design standards, patterns, and methodologies. Balance complexity, business requirements, cost, and timelines to achieve optimal outcomes for customers and the business.
• Create and communicate multiple architectural and design views to address stakeholder concerns and ensure alignment with both functional and non-functional requirements.
• Develop models and prototypes to validate proposed designs, secure stakeholder approval, and enable effective implementation.
• Recommend and refine designs that consider current and target environments, performance, security, and integration with existing systems. Conduct design reviews, providing constructive feedback to improve quality across the team.
• Analyse and document the technical impact of new product features and architectural enhancements, including estimating effort and identifying dependencies.
• Contribute to the selection of appropriate software development approaches to meet quality standards, delivery timelines, and risk management objectives.
• Apply agreed development standards, tools, and best practices to deliver robust, scalable, and maintainable software solutions.

Essential Skills and Experience:

• Demonstrated expertise in software design patterns and coding best practices
• AI Assisted Development – tools like GitHub Copilot to write, review, debug code
• Prompt Engineering
• Experience in SaaS-based full stack development, with proficiency in Java and modern JavaScript frameworks.
• Hands-on experience with Spring (or similar backend frameworks).
• Experience working with frontend frameworks such as Angular or React.
• Proven experience designing and implementing infrastructure-as-code on AWS, including services such as CloudFormation, CDK, load balancers, EC2, S3, Lambda, and container-based runtime environments.
• Solid understanding of CI/CD principles and experience with tools such as GitHub, CircleCI, CodePipeline, or Bamboo.
• Strong problem-solving and system design capabilities.
• Ability to mentor, coach, and effectively share knowledge within the team.
• Proven track record of proactive contribution across the Software Development Lifecycle (SDLC). 

Desirable Skills and Experience:

• Previous experience with monolithic to microservices App migration
• Experience with NoSQL/Document/Vector databases
• Performance optimizations with data caching and related designs
• Have worked in Data pipelines/ETL
• Application monitoring with CloudWatch, New Relic
• RAG Pipeline Design

Qualifications:

• Bachelor of Computer Science degree or equivalent academic qualification

Position Purpose: To be part of an existing team to create, maintain, support and improve upon existing internal production applications to speed up delivery of products to our customers. This will also include the implementation of new business rules and functionality the business deems required.

Key Responsibilities: 

• Develop technical solutions that help achieve business and customer goals. Be able to provide clear feedback to technical and project teams upon encountering technological limitations.
• Be part of the ongoing development and support of any new solutions, as well as existing legacy production processing systems to agreed estimates and schedules.
• A demonstrated focus on continuous improvement and process optimisation of new and existing systems.
• Work with project management to assist in work breakdowns and estimates as required.
• Ensure documentation is created and maintained with a view to enabling ongoing development support (and where possible improvement) as well as handing over ongoing processing to the existing production team.
• Ensure ongoing code quality, data quality checking, error reporting and correction occurs.

Essential Subject Skills and Experience:

• 2+ years of E2E In-depth Databricks experience on a real project(s) that have gone to production
• Databricks Genie, AI/BI Dashboards and Analytics reporting.
• Databricks pipelines, warehouse, jobs.
• Databricks Platform set up and admin, cost reduction.
• Databricks ELT, CDC, Streaming - general ETL and ELT and ETL/ELT scaling. Databricks Ingestion tools, e.g., SQL Server Connect
• Development of Databricks applications, ‘App’ and ‘One’ experience.
• Strong experience with Delta Lake, Lakehouse and Medallion architectures, Data architecture
• Meta data catalogs and data governance - Databricks Unity catalog.
• Strong data modelling/data expertise.
• Understanding of AI and Ml.
• General computing experience, AWS, S3, CI/CD, Git, SDLCs, Agile/Iterative.
• Excellent communication and time management skills
• Strong analytical and problem-solving skills
• Be flexible/adaptable and can embrace change

Desirable Skills and Experience:

• DB/Spark performance and optimization.
• Strong Apache Spark and pyspark - created Spark clusters, Spark (and Kafka) Streaming, Data pipelines/orchestration.
• Strong Python and Dash development experience.
• Advance SQL, with materialized views, Common Table Expressions.
• Statistics, Machine Learning, data mining, Experimental design.
• MLFlow, AI training/testing/evaluation and its orchestration.
• GenAI, LLMs, Prompt Engineering, RAG, Fine Tuning, Agents.
• AI ways of working, e.g. CRISP-DM, TDSP etc.

Overview:

We are seeking a highly skilled Solutions Architect to lead the design and optimization of our product’s architecture. In this role, you will serve as the key architect for data solutions, overseeing the integration of advanced technologies while mentoring junior team members and collaborating with cross-functional teams.

Key Responsibilities:

• Responsible for building end-to-end solution design for products and applications.
• Partnering with business, engineering and product stakeholders to determine system requirements and designing fit-for-purpose solutions
• Be a key contributor to the Architecture peer group supporting with their strategy and roadmap
• Design solutions for new initiatives/enhancements with a focus on simplicity and operational integration.
• Review, assessment and governance of application/product solution designs for conformance to architecture principles throughout the project lifecycle.
• Diagnose and solve architecture problems and issues that may arise.
• Act autonomously in dealing with identified issues or deviance from standards.
• Support the adoption of target-state architecture by executing on the strategy for enterprise and digital platforms and systems.
• Alignment to architecture standards and principles to ensure solution decisions are made consistently across the enterprise and in the context of target architectures.
• Improve application/product performance through enterprise solutions and capabilities, Application data security and access control designs

Required Qualifications:

• Bachelor or Master degree in Computer Science, Information Technology, Data Science, or a related field.
• 10+ years of experience in software architecture, data lake and database design, and data modelling, with at least 5+ years in a senior or lead role.
• Expertise in enterprise-scale data platform and technology – Databricks, DLT, Spark, Python and non-relational databases - MongoDB.
• Deep knowledge of cloud-based architectures.
• Proven expertise in data governance, security frameworks, and compliance standards (e.g., GDPR).
• Exceptional analytical, problem-solving, and decision-making skills, with a focus on driving business outcomes through software architecture.
• Ability to communicate complex technical concepts effectively to executive leadership and cross-functional teams.

Preferred Qualifications:

• Experience in artificial intelligence (AI) or machine learning (ML) data architectures.
• Advanced knowledge of DevOps practices and continuous integration/continuous delivery (CI/CD) pipelines for data operations.
• Strong programming skills in Java, Python or Scala, particularly for data manipulation and processing.
• Strong experience in designing and managing data lakes, data warehouses, and real-time streaming systems (e.g., Spark, Databricks).
• Excellent understanding of ETL/ELT processes, data integration, and data transformation tools.
• Experience in working with big data technologies and delivering large-scale data platforms.
• Certification in cloud architecture (e.g., AWS Certified Solutions Architect).

Position Purpose:

• Serve as a Junior Full Stack Developer responsible for designing and delivering high-quality features
• Operate in a hands-on development role
• Take end-to-end ownership of feature technical design across the full stack

Key Responsibilities:

• Design and develop product software features using appropriate modelling techniques, adhering to agreed design standards, patterns, and methodologies. Balance complexity, business requirements, cost, and timelines to achieve optimal outcomes for customers and the business.
• Apply agreed development standards, tools, and best practices to deliver robust, scalable, and maintainable software solutions.

Essential Skills and Experience:

• Demonstrated knowledge in software design patterns and coding best practices, with the ability to apply them effectively in real-world scenarios.
• Good experience in SaaS-based full stack development, with proficiency in Java and modern JavaScript frameworks.
• AI Assisted Development – use of tools like GitHub Copilot to write, review and debug code.
• Basic Prompt Engineering
• Understanding of AI/ML concepts
• Hands-on experience with Spring (or similar backend frameworks).
• Experience working with frontend frameworks such as Angular or React.
• Exposure to Cloud-based infrastructure and container-based runtime environments.
• Understanding of CI/CD principles and experience with tools such as GitHub, CircleCI, CodePipeline, or Bamboo.
• Strong problem-solving and good system design capabilities.
• Excellent communication skills

Desirable Skills and Experience:

• Experience with NoSQL/Document/Vector databases
• Performance optimizations with data caching and related designs
• Application monitoring with CloudWatch, New Relic
• RAG fundamentals and AI tool workflow

Qualifications:

• Bachelor of Computer Science degree or equivalent academic qualification