Senior Information Security Engineer

Description

• Handle BAU tasks such as quarantined emails, escalated tickets, mentoring, and project support.
• Administer and optimize security tools (Microsoft Azure, Entra ID, M365, Defender, AV/EDR), manage configurations, and monitor identity/access management.
• Oversee daily security operations with SOC/SIEM provider, monitoring networks, systems, and applications for threats.
• Deliver security awareness campaigns, training programs, and phishing simulations.
• Support compliance with Cyber Essentials, ISO 27001, UK GDPR, and NIST; assist audits and respond to security questionnaires.
• Detect, analyze, and respond to potential compromises swiftly.
• Conduct risk assessments, vulnerability scans, and advise on mitigation for emerging threats.
• Stay updated on threats, recommend security enhancements, and maintain professional development.
• Lead or support incident investigations, coordinate containment and remediation, and produce post-incident reports.
• Develop and implement security policies, standards, and ensure compliance with organizational and regulatory requirements.

Requirements

• Familiarity with secure coding practices and DevSecOps principles.
• Strong grasp of enterprise IT architectures and security integration.
• Minimum 5 years’ experience in information security or related technical roles.
• Ability to obtain BPSS and SC Clearance as a condition of employment.
• Experience planning/coordinating penetration tests and managing remediation.
• Skilled in maintaining and supporting an ISMS aligned to ISO 27001 and Cyber Essentials.
• Strong understanding of Microsoft 365, Azure, and cloud security controls (AWS/GCP exposure advantageous).
• Adaptable, proactive, and able to manage changing priorities in a fast-paced environment.
• Excellent documentation, communication, and stakeholder engagement skills.
• Hands-on experience with incident response, vulnerability management, and risk assessment.
• CompTIA Security+ or CySA+ certifications.
• Proven track record managing or collaborating with outsourced SOC and SIEM providers.
• Industry certifications such as CISSP, CISM, CEH, GIAC.
• Knowledge of UK data protection regulations (UK GDPR, DPA 2018).
• ISO/IEC 27001 auditing experience (highly desirable).
• Experience in construction or regulated industries (finance, healthcare, government) beneficial.

Benefits

• Generous holiday entitlement, increasing with years of service, plus the opportunity to purchase further holidays
• Regular Save as You Earn share purchase scheme
• Paid for yearly membership to one recognised professional association relevant to your role
• Competitive family leave policy
• Private medical scheme options are available for all salaried employees, and our employee assistance programme also provides free 24/7 support to those who need it
• A wide range of corporate discounts
• Cycle to Work schemes
• Comprehensive pension plan

Training + Development

Interview process

Visa Sponsorship

Security clearance