Security Engineer

Ready to take your security engineering career to the next level? Are you a hands-on Security Engineer who enjoys tackling technical challenges, strengthening cyber defences and making a real impact on an organisation's security posture?

We're looking for a talented Security Engineer to play a key role in protecting and enhancing our technology environment. This is much more than a traditional security operations role. You'll work across cloud security, vulnerability management, threat detection, incident response and infrastructure protection, while also contributing to the development and improvement of our wider IT environment.

Reporting directly to the CISO and working closely with the Head of Engineering, you'll have genuine visibility, responsibility and the opportunity to influence how security is delivered across the organisation. From strengthening AWS and Microsoft 365 security controls to improving threat monitoring, automating processes and responding to emerging cyber threats, you'll enjoy a varied technical role where your expertise will make a difference.

If you're passionate about cybersecurity, enjoy working hands-on with modern technologies and want a role offering variety, responsibility and the opportunity to make an impact, we'd love to hear from you.

Your responsibilities will include

Implementing and improving security controls across AWS, Microsoft 365, corporate endpoints and network infrastructure. Managing security technologies including SIEM, EDR, vulnerability management, endpoint protection and identity and access management.

Monitoring security alerts, investigating potential threats and coordinating vulnerability remediation. Conducting vulnerability assessments, security configuration reviews and technical risk assessments. Supporting cloud security, network protection, privileged access management and infrastructure hardening.

Working with Engineering to embed security into infrastructure, deployment processes and technical operations. Improving security monitoring through automation, enrichment and operational efficiencies. Supporting security incident investigations, containment, recovery and root cause analysis.

Managing corporate IT systems, including Microsoft 365, macOS, JAMF and associated business applications. Maintaining secure device configurations, patching, software deployment, encryption and endpoint management. Supporting employee onboarding, offboarding, access management and technical troubleshooting.

Maintaining technical documentation, IT asset records and security evidence. Supporting backup, recovery, business continuity and disaster recovery activities. Supporting the CISO and GRC team to support technical compliance, security audits and assurance activities, including WebTrust, ETSI and Cyber Essentials Plus. ...

Report this job