IT Security Operations Engineer

Salary: £70,000 - 70,000 per year

Requirements:

• Passion for improving operational security and reducing cyber risk.
• Collaborative, approachable and service-oriented, with the ability to prioritise effectively in a fast-paced operational environment.
• Strong attention to detail, commitment to continual improvement, and ability to balance security requirements with operational needs.
• Curiosity, proactivity and willingness to develop new technical skills.
• Clear communication skills and ability to work with a wide range of stakeholders.
• Experience in an IT Security Operations, Cyber Security or Infrastructure Security role.
• Strong understanding of vulnerability management processes and remediation workflows.
• Experience investigating and responding to security incidents.
• Familiarity with security monitoring technologies, SIEM platforms and endpoint security solutions.
• Knowledge of operating system security across Mac, Windows and Linux environments.
• Experience with identity and access management concepts.
• Understanding of networking fundamentals and common security protocols.
• Experience administering or supporting enterprise security technologies such as endpoint protection, email security, firewalls and vulnerability scanners.
• Experience writing scripts in PowerShell, Python, Bash or similar languages to automate operational tasks.
• Strong analytical, troubleshooting and problem-solving skills.
• Experience securing public cloud platforms is an advantage.
• Knowledge of Microsoft 365 security technologies is an advantage.
• Experience with vulnerability management platforms such as Tenable, Qualys or Rapid7 is an advantage.
• Familiarity with SIEM and security automation platforms such as Microsoft Sentinel, Splunk or Elastic is an advantage.
• Experience implementing endpoint detection and response (EDR/XDR) technologies is an advantage.
• Understanding of Identity Governance and Privileged Access Management is an advantage.
• Knowledge of cybersecurity frameworks and implementing and maintaining effective security controls is an advantage.
• Experience in scientific research, higher education or the public sector is an advantage.

Responsibilities:

• Lead our vulnerability management programme, including identifying and prioritising vulnerabilities, tracking remediation and reporting across technology assets.
• Work with IT Operations, Infrastructure and Service Delivery teams to reduce our external attack surface and technology risk.
• Support the day-to-day operation of our cybersecurity services and controls.
• Investigate, respond to and coordinate security incidents with technical teams to minimise operational impact.
• Monitor security events and alerts, investigate suspicious activity and escalate where appropriate.
• Maintain and improve operational security processes, procedures and documentation.
• Support the deployment, configuration and optimisation of security technologies.
• Work with infrastructure and platform teams to implement security improvements across on-premise and cloud environments.
• Collaborate with our European security teams and third-party service providers.
• Develop and maintain operational security metrics, dashboards and reports.
• Automate routine security tasks and improve operational efficiency through scripting and workflow optimisation.
• Perform security assessments and support risk remediation activities.
• Assist with implementing and maintaining security standards, policies and technical baselines.
• Contribute to disaster recovery, business continuity and operational resilience initiatives.
• Participate in security projects supporting our wider cybersecurity strategy.
• Monitor emerging cyber threats and recommend improvements to strengthen our security posture.
• Provide practical security advice and guidance to technical teams across our organisation.

Technologies:

• Bash
• Cloud
• Support
• Linux
• Microsoft 365
• PowerShell
• Python
• Security
• Splunk
• Windows
• Office 365

More:

We are EMBL-EBI, part of the European Molecular Biology Laboratory and a worldwide leader in storing, analysing and disseminating large biological datasets. Our databases and tools support global research and advances in healthcare, food security and biodiversity. This hands-on IT Security Operations Engineer role supports our cybersecurity capabilities through day-to-day operations and continuous improvement, working across infrastructure, platform and service teams. The position is based on the Wellcome Genome Campus in Cambridgeshire, within a collaborative and inclusive research community. It is a three-year, project-based contract at Grade 5 or 6, with a monthly salary starting at £3,452.05 or £3,861.91 respectively, plus benefits and financial allowances based on individual circumstances; figures exclude personal pension and insurance contributions. We offer flexible and hybrid working, private medical insurance, generous annual leave, pension and other financial benefits, relocation support where required, and campus facilities and family benefits. We recruit internationally and offer visa exemptions to successful candidates. We welcome applications from people of all genders, identities, nationalities and diverse backgrounds. Applications require a cover letter and CV submitted through our online system.

last updated 40 week of 2026