Security Engineer

Location:

Hybrid - primarily remote, with travel to FI centres as required

Contract Type :
Permanent, Full-Time

First Intuition (FI) is a fast-growing, innovative accountancy training provider committed to delivering outstanding learning experiences. At FI, our commitment to excellence is driven by our core driving principle of putting people first. We take pride in nurturing talent, fostering growth, and providing unparalleled support to our students, clients, and team members, ensuring they can thrive personally and professionally.

Our success is due to our approach to training and our links with businesses. We work closely with organisations to precisely understand their needs and incorporate these into innovative course designs, where the interaction with students is tailored, personal and reflects their specific circumstances. This approach has led to First Intuition being awarded an ‘Outstanding’ rating by Ofsted.

We are seeking a hands-on Security Engineer with a strong vulnerability management focus to help reduce organisational cyber risk through effective vulnerability management, security automation and continuous improvement of security controls. This is an excellent opportunity to join a growing security function and play a key role in protecting our rapidly expanding organisation.

You will manage the technical vulnerability lifecycle from identification and validation through risk-based prioritisation, remediation and verification. You will also support security operations by improving the tooling, integrations and automated processes used by the SOC to identify and respond to security threats.

This role suits an engineer who enjoys turning security findings into measurable risk reduction, automating repeatable security processes and working across Security, Infrastructure, IT Operations and application teams.

• Operate and continuously improve the end-to-end vulnerability management lifecycle across endpoints, servers, networks, cloud services and applications.
• Run and review authenticated vulnerability assessments using Qualys, validate findings and reduce false positives.
• Prioritise vulnerabilities using exploitability, threat intelligence, internet exposure, asset criticality, business impact and technical severity rather than relying on CVSS alone.
• Translate findings into clear remediation plans with defined owners, target dates and verification criteria.
• Work with system and application owners to remediate vulnerabilities through patching, configuration changes, hardening, upgrades or compensating controls.
• Develop security automation, preferably using Python, to improve vulnerability triage, remediation workflows, data enrichment and fix validation.
• Test, coordinate and validate security patches and configuration changes while balancing security risk and operational impact.
• Support the SOC from an engineering perspective by improving security tooling, integrations, alert enrichment and automated response processes.
• Assist with security investigations where vulnerabilities, insecure configurations or missing patches may have contributed to an event.
• Use threat intelligence to provide context for vulnerability prioritisation, security alerts and emerging threats.
• Apply Zero Trust principles when implementing or improving endpoint, identity, network and cloud security controls.
• Review network-device configurations and firewall rule sets using Nipper Studio or comparable security auditing tools.
• Track vulnerabilities, exceptions and remediation progress through to verified closure.
• Produce security metrics and dashboards covering exposure, vulnerability ageing, remediation performance and residual risk.
• Maintain technical documentation, remediation playbooks and…