Principal Information Security Engineer

Salary: £50,000 - 90,000 per year

Requirements:

• We need demonstrable experience implementing enterprise security platforms.
• We need strong hands-on experience with the Microsoft security stack.
• We need strong hands-on experience using, managing, and securing diverse end-user compute environments, including Windows, macOS, Linux, and mobile device platforms.
• Experience with firewalls and cloud security solutions is highly advantageous.
• We need deep understanding of information security solutions such as email/web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), and endpoint protection.
• We need a strong understanding of information security risk management tools and techniques.
• We need awareness of information security control standards and frameworks.
• Experience working within recognised information security frameworks and best practices such as ISO27001 and NIST is preferred.
• We prefer at least 5 years experience in an information security role within financial services or e-commerce.
• We need significant experience in information technology security.
• We need strong knowledge of core IT and networking concepts.
• We need extensive experience implementing industry-standard IT security platforms.
• We need strong ownership of tasks, attention to detail, and follow-through to conclusion.
• We need the ability to challenge approach, strategy, and implementation to ensure information security is consistently considered and improved.
• We need the ability to work under our own initiative, plan effectively, and communicate with colleagues and customers.
• We need a structured, self-starting, flexible approach and comfort working in fast-paced environments.
• We need effective written and verbal communication skills.
• We need the ability to plan, organise, and follow through on assigned tasks with little or no prompting from management.
• We need excellent attention to detail.
• CISSP certification is attained or being worked towards.

Responsibilities:

• We act as the primary technical escalation point for the team, providing hands-on guidance and decision-making for complex technical challenges.
• We oversee the day-to-day execution of security engineering, ensuring BAU work is delivered to high standards and team SLAs are met.
• We ensure the quality and consistency of engineering outputs for project engagements, technical tasks, and documentation, keeping them aligned with established security standards.
• We support the technical delivery of our security tooling roadmap, bridging strategic objectives and operational outcomes.
• We work closely with the Information Security Architecture team to validate design concepts and ensure solutions are robust, scalable, and fit for our enterprise environment.
• We collaborate with the Information Security Operations team to drive operational efficiency, quality improvements, and the seamless integration of security controls across the estate.
• We provide technical leadership and mentoring to the engineering team, helping them deliver secure, automated, and effective solutions.

Technologies:

• Cloud
• Support
• Linux
• macOS
• Mobile
• Security
• Web
• Windows

More:

We are AJ Bell, one of the UKs fastest-growing investment platform businesses, helping people invest through easy-to-use solutions for ISAs, pensions, dealing accounts, and advice-led or DIY investing. We manage more than 121.5 billion of assets for over 762,000 customers and are recognised as one of the UKs Best 100 Companies to Work For for six consecutive years, as well as a Great Place to Work in 2025 and 2026. We offer a competitive starting salary, 26 days holiday plus bank holidays and a buy/sell scheme, a 7% pension with matched contributions, discretionary bonus scheme, share schemes, health cash plan, discounted private healthcare, free gym, enhanced family leave, travel and bike loan schemes, and an Employee Assistance Programme. We support learning and development, regular social events, a casual dress code, and a friendly, supportive team environment. We work in a hybrid model with a minimum of 50% of working time per month in the office, with an initial full-time office period for new team members. We are committed to inclusion and diversity and welcome applications from all backgrounds.

last updated 34 week of 2026