Senior IT Security Engineer

Salary: £85,000 - 95,000 per year

Requirements:

• We are looking for someone with good working knowledge and experience managing the majority of the following technology stack: CrowdStrike EDR, Mimecast Mail Security Gateway, Duo, Okta, Rapid7 IVM, Tenable IO or Nessus, Palo Alto Firewalls and Panorama, InTune and Conditional Access, Entra ID, Purview, Defender, Active Directory, DNS, and GPO.
• Experience with Cisco Secure Access, Cisco Umbrella, Cisco ASA, Digicert Certificates and Microsoft Certificate Services, Ivanti patching, Kali Linux tools such as NMAP, Metasploit, BurpSuite, and John, and Microsoft Purview is desirable.

Responsibilities:

• We will manage the Secure Web Gateway.
• We will manage the Email Security Gateway.
• We will carry out vulnerability scans, identify risks, and handle remediation.
• We will manage the perimeter and VPN firewalls.
• We will manage MFA and SSO.
• We will manage MDM/MAM and Conditional Access.
• We will manage security certificates and keys.
• We will deliver Cyber Security Awareness Training.
• We will remediate vulnerabilities and weaknesses identified during penetration testing.
• We will implement and maintain robust security systems and protocols across our IT infrastructure.
• We will conduct risk assessments and vulnerability scans.
• We will mitigate vulnerabilities identified in penetration testing and implement preventative measures against cyber threats.
• We will monitor the security infrastructure and detect and respond to potential threats.
• We will collaborate with the IT team to ensure compliance with security standards and best practices.
• We will act as a key technical leader in safeguarding sensitive data and systems.

Technologies:

• Active Directory
• Cisco
• Linux
• Security
• VPN
• Web

More:

We are a 3-person IT Security team, and this Senior IT Security Engineer role is a hybrid position based in our London office, with three days a week onsite and two days working remotely. The role plays a key part in protecting our organisations IT infrastructure, sensitive data, and systems, while supporting security standards, best practices, and ongoing cyber resilience.

last updated 30 week of 2026