Job Title 

Job Description

Part of Kaplan Inc.,a US-owned business, Kaplan International is a world-leading education business providing English courses for international students (Kaplan International English) and preparation programmes for international students wishing to enter UK universities (Kaplan International Pathways). We are a premium brand with a reputation for high-quality tuition and excellent levels of pastoral support. 

About the role

Information technology at Kaplan International (KI) is a key enabler of business transformation and growth. KI is going through a multi-year digital transformation programme across the student journey. As part of this transformation, we are enhancing and expanding our Security Operations team to meet increasing cyber threats.

Responsibilities:

• Manage and optimise Microsoft Defender XDR, Defender for Endpoint and Intune for endpoint protection, compliance and threat detection.
• Implement and maintain security controls across AWS, Azure and Microsoft 365 environments.
• Lead and manage enterprise vulnerability management across endpoints, cloud infrastructure and applications using Qualys, Snyk, Orca Security and Microsoft Defender Vulnerability Management, including vulnerability identification, risk prioritisation, remediation tracking and reporting
• Conduct application security assessments, security architecture reviews and threat modelling, aligned with OWASP Top 10.
• Investigate security incidents, improve detection capabilities and coordinate technical remediation.
• Develop security automation using PowerShell, Python and APIs.
• Collaborate with Cloud, Infrastructure, DevOps and Development teams to embed security best practices.
• Mentor junior engineers and drive continuous security improvements.
• Assess and implement security controls for AI-powered applications, Microsoft Copilot and enterprise AI services, addressing data protection, access controls, prompt injection, model risks and secure AI adoption
  Required Skills & Experience
• 5+ years of hands-on cyber security engineering experience.
• Strong experience with Microsoft Defender, Intune, Azure, AWS and M365 security.
• Experience with Orca, Qualys, Snyk or equivalent security platforms.
• Strong understanding of cloud security, vulnerability management and application security.
• Experience with DevSecOps, CI/CD security, OWASP, SAST, DAST and SCA.
• Knowledge of incident response, security monitoring and identity security.
• Scripting experience with PowerShell, Python or similar.
• Familiarity with NIST, CIS Controls and ISO 27001.

Desirable Certifications: AZ-500, SC-200, SC-100, AWS Security Specialty, CISSP

Requirements:

• Expertise across the whole IT security spectrum (Software, Servers, Infrastructure, Networks)
• Strong IT Security knowledge, and ability to balance business objectives with information security best practises
• Advanced scripting and automation experience.
• Documenting security incidents, their analysis, and remediation measures, and providing regular updates and reports.
• Identifying, prioritizing, and managing vulnerabilities in systems and applications.
• Strong understanding of vulnerability management, EDR, XDR, DLP, SOC management tooling and other security tools.
• Experience of securing o365 and configuration of Microsoft security tools.
• Working knowledge of public cloud security and protecting SaaS solutions
• An inquiring mind, can-do, positive attitude, and initiative-taking approach
• Good organisational and planning skills, and the ability to make decisions independently

Beyond base salary, our comprehensive total rewards package includes:

Hybrid work model provides a flexible work/life balance
Voluntary Provident Fund is an additional voluntary contribution scheme associated with the statutory Employee Provident Fund (EPF)
Our Gift of Knowledge Program provides tuition assistance and substantial discounts for our employees and close family members
Comprehensive health benefits new hire eligibility starts on day 1 of employment
Generous Paid Time Off includes National holidays(10), Earned leaves(15), sick leave(12), plus one (1) volunteer day to participate and give back to our local communities
Gratuity is applicable upon completion of 5 years as per the Gratuity Act

We are committed to providing a supportive and rewarding work environment where every employee can thrive. You can learn more about our full benefits package and total rewards philosophy here.

Location

Additional Locations 

Employee Type

Job Functional Area 

Business Unit

Diversity & Inclusion Statement:

Kaplan is committed to cultivating an inclusive workplace that values diversity, promotes equity, and integrates inclusivity into all aspects of our operations. We are an equal opportunity employer and all qualified applicants will receive consideration for employment regardless of age, race, creed, color, national origin, ancestry, marital status, sexual orientation, gender identity or expression, disability, veteran status, nationality, or sex. We believe that diversity strengthens our organization, fuels innovation, and improves our ability to serve our students, customers, and communities. Learn more about our culture here.

Kaplan considers qualified applicants for employment even if applicants have an arrest or conviction in their background check records. Kaplan complies with related background check regulations, including but not limited to, the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.  There are various positions where certain convictions may disqualify applicants, such as those positions requiring interaction with minors, financial records, or other sensitive and/or confidential information.