Security Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Manchester, England, GB

4 days ago Requisition

Job Title: Senior Security Engineer (On-Premise Focus)

Reports To: Head of Engineering

Location: Manchester, UK

About the Role: We are seeking a highly experienced Senior Security Engineer to take ownership of security for our critical on‑premise platform. This is a hands‑on, technical leadership role where you will design, implement, harden, monitor, and continuously improve our security posture in a predominantly VMware‑based on‑prem environment. You will drive security strategy and execution, ensuring compliance, threat prevention, and rapid incident response, while collaborating with infrastructure, operations, and leadership teams.

This position requires a proactive, detail‑oriented engineer comfortable working in a high‑security, regulated environment. This is a full‑time fixed‑term role, requiring 5 days per week on‑site (no remote or hybrid options). There is occasional travel required within the UK (and potentially internationally) to support related sites, vendors, or projects.

Security

Clearance Required:

Secret Clearance at a minimum. Willing to attain Developed Vetting.

• Lead the design, configuration, deployment, and ongoing management of security controls for on‑premise infrastructure, with a strong emphasis on network and workload segmentation.
• Own and optimise VMware NSX (including Distributed Firewall policies and micro‑segmentation) and VMware vDefend (Distributed Firewall, threat prevention, and lateral security features) to enforce zero‑trust principles and prevent lateral threat movement.
• Manage, tune, and harden Palo Alto Networks next‑generation firewalls (NGFW), including policy creation, Panorama management, App‑/User‑, NAT, VPN, threat prevention profiles, and integration with other security tools.
• Configure and maintain Cisco network security devices (e.g., routers, switches, ASA/FTD firewalls, ISE for NAC) to support secure network access and segmentation.
• Harden Windows Server environments and related Microsoft products (Active Directory, Group Policy, endpoint configurations) using security best practices and CIS Benchmarks.
• Champion Dev Sec Ops  practices by embedding security into CI/CD pipelines, automating security testing (e.g., vulnerability scanning, policy‑as‑code), collaborating with development and operations teams to shift security left, and ensuring secure software delivery without impeding velocity.
• Deploy, configure, and leverage Elastic Stack (Elasticsearch, Kibana, Beats, Logstash) and Elastic Security features for centralised logging, SIEM capabilities, threat detection, dashboards, alerting, and integration with on‑prem security tools (e.g., feeding logs from NSX/vDefend, firewalls, and endpoints).
• Implement, audit, and remediate against CIS Benchmarks, STIGs, and other hardening standards across operating systems, network devices, virtualisation platforms, and applications.
• Perform vulnerability assessments, penetration testing support, risk assessments, and remediation planning for on‑prem assets.
• Monitor security events, respond to incidents, conduct root cause analysis, and implement preventive measures.
• Drive security architecture decisions, contribute to policy development, and act as the primary technical security point of contact for the platform.
• Collaborate with vendors, auditors, and internal teams to ensure compliance with regulatory and organisational requirements.
• Mentor junior engineers and promote a security‑first culture.

• 7+ years of hands‑on experience in cybersecurity engineering, with at least 5 years focused on on‑premise enterprise environments.
• Proven deep expertise in VMware NSX (micro‑segmentation, DFW policies, integration) and VMware vDefend (Distributed Firewall, advanced threat prevention).
• Strong experience designing and managing Palo Alto Networks firewalls (NGFW, Panorama, threat prevention, Global Protect).
• Solid hands‑on experience with Cisco…