Security Engineer in Edinburgh

Ready to take your security engineering career to the next level? Are you a hands-on Security Engineer who enjoys tackling technical challenges, strengthening cyber defences and making a real impact on an organisation's security posture? We're looking for a talented Security Engineer to play a key role in protecting and enhancing our technology environment. This is much more than a traditional security operations role. You'll work across cloud security, vulnerability management, threat detection, incident response and infrastructure protection, while also contributing to the development and improvement of our wider IT environment.

Reporting directly to the CISO and working closely with the Head of Engineering, you'll have genuine visibility, responsibility and the opportunity to influence how security is delivered across the organisation. From strengthening AWS and Microsoft 365 security controls to improving threat monitoring, automating processes and responding to emerging cyber threats, you'll enjoy a varied technical role where your expertise will make a difference. If you're passionate about cybersecurity, enjoy working hands-on with modern technologies and want a role offering variety, responsibility and the opportunity to make an impact, we'd love to hear from you.

Your responsibilities will include:

• Implementing and improving security controls across AWS, Microsoft 365, corporate endpoints and network infrastructure.
• Managing security technologies including SIEM, EDR, vulnerability management, endpoint protection and identity and access management.
• Monitoring security alerts, investigating potential threats and coordinating vulnerability remediation.
• Conducting vulnerability assessments, security configuration reviews and technical risk assessments.
• Supporting cloud security, network protection, privileged access management and infrastructure hardening.
• Working with Engineering to embed security into infrastructure, deployment processes and technical operations.
• Improving security monitoring through automation, enrichment and operational efficiencies.
• Supporting security incident investigations, containment, recovery and root cause analysis.
• Managing corporate IT systems, including Microsoft 365, macOS, JAMF and associated business applications.
• Maintaining secure device configurations, patching, software deployment, encryption and endpoint management.
• Supporting employee onboarding, offboarding, access management and technical troubleshooting.
• Maintaining technical documentation, IT asset records and security evidence.
• Supporting backup, recovery, business continuity and disaster recovery activities.
• Supporting the CISO and GRC team to support technical compliance, security audits and assurance activities, including WebTrust, ETSI and Cyber Essentials Plus.

Essential Skills & Experience:

• Demonstrable experience in Security Engineering, Security Operations or a similar technical cybersecurity role.
• Strong working knowledge of AWS, Microsoft 365 and associated cloud security controls.
• Hands-on experience with security technologies such as SIEM, EDR, vulnerability management and endpoint protection.
• Practical experience in security monitoring, vulnerability remediation, incident investigation and technical risk mitigation.
• Understanding of common cyberattack techniques, emerging threats and threat intelligence.
• Ability to assess threats, communicate relevant intelligence and support remediation planning.
• Good knowledge of networking, firewalls, VPNs, identity and access management and secure infrastructure configurations.
• Experience administering and supporting macOS and corporate IT environments.
• Strong troubleshooting, analytical and problem-solving skills.

Desirable Experience:

• Working within regulated environments or organisations subject to independent security audits.
• AWS security services, Microsoft Defender, Rapid7 or comparable security platforms.
• Cyber Essentials Plus, WebTrust, ETSI or similar security frameworks.
• Public Key Infrastructure (PKI), Certificate Authorities and cryptographic security controls.
• Security automation, Infrastructure as Code, CI/CD security and cloud-native monitoring.
• Working within a remote or start-up environment.
• JIRA for service management and incident tracking, and Confluence for technical documentation.

£50,000–£60,000 salary, depending on experience. Fully remote working – enjoy the flexibility of working from anywhere in the UK. Pension provision to support your future. Healthcare benefits for added peace of mind. Direct exposure to and collaboration with the CISO and Head of Engineering. The opportunity to influence and improve security controls and infrastructure. A varied hands-on role covering cloud security, cyber defence and IT engineering. Exposure to modern cloud, endpoint and security technologies.