Senior IT Security Engineer

We are looking for an experienced IT Security Engineer to strengthen enterprise cybersecurity across security operations, governance, infrastructure protection, and risk management. This role will be responsible for maintaining security controls, investigating potential threats, managing vulnerabilities, and working with internal teams and external partners to improve the organisation’s overall security posture.

• Develop and maintain information security policies, technical standards, procedures, and security baselines in line with industry best practices and regulatory requirements.
• Conduct regular security reviews and ensure compliance with security controls, system hardening standards, and CIS benchmarks.
• Support cybersecurity risk assessments, audits, third-party reviews, and remediation activities.
• Advise IT, application, infrastructure, and cloud teams on security best practices and security-by-design principles.
• Support personal data protection initiatives and security requirements relating to data privacy.

• Monitor security events, emerging threats, and the organisation’s overall cybersecurity posture.
• Investigate alerts using SIEM and other security monitoring platforms, conduct initial triage, and escal​ate.
• Coordinate security incident response from investigation through containment, remediation, and closure.
• Monitor threat intelligence and vulnerability developments, providing relevant security advisories and patching recommendations.
• Improve security monitoring capabilities, detection rules, alert accuracy, and incident response procedures.

• Coordinate vulnerability assessments, penetration testing, and security reviews across applications, networks, servers, endpoints, and cloud environments.
• Analyse findings, recommend remediation measures, and track corrective actions against agreed timelines.
• Conduct security and compliance checks on computing devices before they are connected to corporate networks.

• Configure, maintain, and optimise security tools to ensure effective integration with enterprise IT infrastructure.
• Implement and manage security controls across on-premises and cloud environments, covering networks, systems, endpoints, identities, and runtime environments.
• Manage endpoint protection solutions, including antivirus and EDR/XDR, as well as privileged access management (PAM) platforms such as Cyber Ark.
• Conduct periodic reviews of user accounts, privileged accounts, access permissions, access logs, and third‑party service provider reports.
• Support secure network architecture, system hardening, access control, and infrastructure security monitoring.

• Identify opportunities to enhance security capabilities and collaborate with external vendors on the design, testing, deployment, and handover of cybersecurity solutions.
• Oversee third‑party security service providers, review service performance and security reports, and ensure adherence to agreed security standards and SLAs.
• Coordinate the implementation, maintenance, testing, and monitoring of security technologies, including WAF, DDoS protection, SIEM, EDR/XDR, PAM, and vulnerability management tools.

• Deliver security awareness initiatives and training for employees and external service providers.
• Maintain documentation covering security policies, procedures, incidents, vulnerability assessments, and control reviews.
• Prepare regular reports on security incidents, vulnerability remediation, compliance, risk exposure, and mitigation progress.
• Work closely with internal IT teams,…