IT Infrastructure Security Engineer

Location: Elland Road, Leeds

Contract:
Permanent

Hours of Work: 37.5 Hours Per Week

We are seeking an experienced and hands‑on IT Infrastructure Security Engineer to become the Club's first dedicated cybersecurity specialist.

This is an exciting opportunity to establish and develop the Club's security capability, playing a key role in protecting critical systems, data, and infrastructure while supporting major technology projects, including stadium expansion plans.

Reporting to the IT Manager, you will operate as a technical specialist responsible for building the Club's security foundations, embedding security into infrastructure projects, and developing ongoing security operations and best practice across the organisation.

• Design and implement secure network architectures across club and stadium environments.
• Develop and maintain network segmentation, firewall configurations, and zero-trust access controls.
• Support the secure design and deployment of new infrastructure projects.
• Review and validate technical security requirements across infrastructure environments.

• Act as the security lead across technology work streams relating to stadium development projects.
• Review supplier and vendor security requirements.
• Define security acceptance criteria and secure build standards.
• Ensure cybersecurity considerations are embedded throughout project delivery.

• Establish and manage the Club's vulnerability management programme.
• Conduct vulnerability assessments and coordinate remediation activities.
• Manage patching processes across servers, endpoints, and infrastructure.
• Monitor emerging vulnerabilities and security risks.

• Manage and develop Microsoft Entra  Microsoft Intune environments.
• Implement and maintain Multi‑Factor Authentication (MFA).
• Develop Conditional Access policies and Privileged Access Management controls.
• Support secure user lifecycle and access management processes.

• Develop, implement, and maintain the Club's Incident Response Plan.
• Support Business Continuity and Disaster Recovery planning.
• Participate in testing and exercising cyber response procedures.
• Investigate and respond to security incidents where required.

• Implement and manage SIEM and security monitoring solutions.
• Support threat detection and security investigations.
• Monitor security events and recommend improvements.
• Produce security reports and provide updates to IT leadership.

• Support the Club's compliance with UK GDPR and data security obligations.
• Work alongside the Data Protection Officer on security-related matters.
• Assess and mitigate data security risks.
• Contribute to security documentation, standards, and policies.

• Conduct supplier security assessments and reviews.
• Ensure third-party partners meet security standards.
• Deliver security awareness initiatives and phishing simulations.
• Promote good cybersecurity practices throughout the organisation.

• CompTIA Security+, SC-200, or an equivalent cybersecurity qualification.
• Strong technical knowledge across cybersecurity and infrastructure security.
• Excellent problem-solving and analytical skills.
• Strong communication and stakeholder management abilities.
• Ability to work independently and take ownership of security initiatives.
• Strong documentation and reporting skills.
• Commitment to continuous professional development.

• Minimum 3 years' experience in a hands‑on technical cybersecurity role.
• Experience working with Microsoft 365 security technologies.
• Ex…