IT Infrastructure & Cyber Security Engineer

Salary: £42,500 - 72,000 per year

Requirements:

• We are looking for someone operating at strong 3rd Line Engineer level or equivalent, with around 2-3 years experience in a similar role.
• We require at least one cyber security certification.
• We expect hands-on experience across approximately 80% of the technologies and environments outlined in the advert.
• We need strong infrastructure experience across cloud and on-premise environments.
• We are looking for good working knowledge of Azure, Google Workspace, networking, endpoint management and security.
• Experience with technologies such as CrowdStrike, Cisco, VMware vSphere, Windows Server, Mac/Windows, Jamf, Intune, Automox and VPNs would be valuable.
• We need strong security monitoring, incident response and threat-analysis knowledge, including IOC investigation and remediation.
• Experience or knowledge of security frameworks and compliance, ideally including Cyber Essentials and ISO 27001, is required.
• We are looking for the confidence and technical capability to handle complex Tier 3 escalations.
• Strong problem-solving skills and a proactive approach to improving infrastructure and security are important.
• Excellent communication skills and confidence working with colleagues, suppliers and senior leadership are required.
• You must be willing to undertake occasional out-of-hours work and travel to London.
• Additional cyber security certifications such as CISSP, CISM or CompTIA would be an advantage.
• ITIL or project management certification such as PRINCE2 would be an advantage.
• Hands-on experience administering AI coding or agent tools, including Claude Code, GitHub Copilot or Codex, would be an advantage.
• Experience configuring MCP servers, connectors, permissions and access controls would be an advantage.
• Familiarity with emerging agentic AI infrastructure and its associated security considerations would be an advantage.
• Experience working with Netskope would be an advantage.
• Hands-on Netskope CASB/SSE experience covering SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design and SCIM-based provisioning would be an advantage.

Responsibilities:

• We oversee the planning, implementation, monitoring and maintenance of our on-premise and cloud infrastructure, including Azure, Google Workspace, networks, firewalls and VPNs.
• We ensure systems remain reliable, resilient, performant, securely configured and appropriately updated.
• We lead infrastructure projects from capacity planning through to deployment.
• We support complex 2nd and 3rd Line issues and act as a dedicated Tier 3 escalation point for the Helpdesk team.
• We create and maintain technical documentation, policies and procedures, ensuring effective handover to Service Desk colleagues.
• We take ownership of infrastructure-related budgeting and contracting requirements.
• We work across different technical projects as the needs of the business evolve.
• We develop and continually improve the security measures protecting our technology environment.
• We help drive improvements to email security as a key priority.
• We monitor, investigate and remediate security alerts, incidents and Indicators of Compromise (IOCs).
• We conduct threat analysis, identify emerging risks and implement appropriate mitigation strategies.
• We lead the incident response lifecycle, including security incidents and data breaches, from containment and eradication through to post-incident analysis.
• We manage and optimise security technologies including Next-Gen SIEM, SOAR, EDR/MDR/XDR and cloud security solutions such as CASB, ZTNA and SASE.
• We take a leading role in our upcoming Cyber Essentials project and support wider compliance activity including ISO 27001.
• We conduct vendor security assessments and work with stakeholders and suppliers to implement secure technology solutions.
• We help safely scale our use of AI across the business.
• We own the setup, configuration and maintenance of AI tooling such as Claude Code, GitHub Copilot, Codex-style coding/agent tools and similar technologies.
• We manage AI integrations, MCP server configuration and connectors.
• We manage user access, permissions and governance, applying least-privilege principles to AI tools and integrations.
• We partner with teams onboarding new AI tools, balancing productivity and innovation with security and compliance.
• We help establish appropriate access controls and security practices as agentic AI, MCP and connector-based technologies continue to evolve.

Technologies:

• Agentic AI
• AI
• Azure
• Claude Code
• Cloud
• Copilot
• Cisco
• GitHub
• Support
• ITIL
• Marketing
• MCP
• Security
• VMware
• Windows
• REST

More:

We are Bulk, one of Europes leading active nutrition brands, on a journey to evolve from a manufacturing-led retailer into a destination brand for active nutrition. We are shaking up the sports nutrition industry through innovative products, disruptive marketing and bold digital thinking. This is a full-time permanent IT Infrastructure & Cyber Security Engineer role based in Colchester, Essex, working hybrid with 3 days in the office and 2 days from home, with occasional out-of-hours working and travel to London. We offer competitive salary and excellent benefits, including a Monthly Bulk Bank Benefits Allowance with subsidised gym membership, 60% discount on Bulk products, birthday day off, PerkBox subscription, flexi start, optional additional annual leave, pension scheme, life assurance, Medicash, volunteering day, cycle to work scheme, enhanced maternity and paternity leave, workplace nursery scheme, a fully stocked Bulk Pantry, happy hour drinks fridge on Thursdays and Fridays, and summer working hours. We value passionate risk-takers who challenge thinking, live and breathe digital, and want to help build a resilient, secure technology foundation behind our continued growth.

last updated 36 week of 2026