Senior Security Engineer

You will strengthen security posture by designing, implementing, and improving security controls, identity services, cloud security solutions, and governance processes. You will manage identity and access, cloud and endpoint security, vulnerability management, automation, security monitoring, risk assessments, threat modelling, and compliance activities. You will also advise stakeholders, maintain security platforms, and develop infrastructure-as-code and automated security workflows.

Responsibilities

• Design, implement, and maintain Identity and Access Management solutions
• Manage permission settings and access controls
• Configure security systems according to requirements and best practices
• Assess cloud and endpoint security configurations against CIS, STIG, SOC2, and internal standards
• Own the administration, configuration, and lifecycle management of security platforms
• Maintain inventories of security tooling and integrations
• Evaluate technologies and recommend security enhancements
• Troubleshoot security platform issues with vendors and stakeholders
• Advise technical teams, business stakeholders, and senior leadership on security architecture, risk reduction, and compliance
• Create and update security policies and procedures
• Manage vulnerability activities across cloud infrastructure, endpoints, SaaS applications, and identity platforms
• Prioritise and coordinate remediation efforts
• Conduct security assessments and threat modelling
• Produce security posture, control effectiveness, and remediation reports
• Develop automation using PowerShell, Python, Bash, and APIs
• Design, implement, and support Terraform and cloud-native Infrastructure as Code solutions
• Integrate security telemetry into Microsoft Sentinel
• Develop automated governance, compliance, and incident response workflows

Requirements

• Extensive Microsoft Entra ID and Identity Governance experience
• Experience securing AWS environments
• Experience with Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, and Azure Security services
• PowerShell, Bash, and Python scripting
• System and application hardening using CIS and STIG standards
• SaaS security administration using SSO, SCIM provisioning, Conditional Access, entitlement governance, and lifecycle management
• Endpoint security across Windows and macOS environments
• Enterprise network security using firewalls, WAF, SWG, ZTNA, DNS security, and cloud-native network controls
• Experience configuring Secure Web Gateways such as Zscaler, iBoss, or Netskope
• Experience with binary execution control solutions such as AppLocker, Defender Application Control, Santa, or ThreatLocker

Benefits

• Hybrid working model
• 35 days of paid time off per year inclusive of annual leave and public holidays
• One additional day of annual leave for each year of service
• Comprehensive medical insurance including dental, optical, audiology, and mental health coverage
• Life insurance
• Enhanced pension contributions with employer matching
• 24/7 Employee Assistance Programme