Security Engineer in Preston

Are you a hands-on Security Engineer who enjoys building, hardening and improving security controls, rather than simply monitoring alerts and passing issues elsewhere? We're recruiting for a rapidly growing, international infrastructure organisation looking to strengthen its internal Cyber Security capability with an experienced Security Engineer.

You’ll be joining a sizeable technology and security function supporting approximately 6,000 colleagues across 125+ locations spanning the UK, Australia and United States. This is a genuinely hands-on engineering position where you’ll work across cloud, identity, endpoint, network and application security, helping engineer vulnerabilities and weaknesses out of the environment.

The Role

Working closely with Security Operations, IAM, Cloud & Infrastructure, Service Operations and Application teams, you’ll help design, configure and continuously improve the technical controls protecting a large and complex digital estate. You’ll also work alongside a 24x7 managed SOC, with the internal Security Engineering team responsible for building, tuning and maintaining the controls that underpin the wider security operation.

Your responsibilities will include:

• Designing, configuring and hardening security controls across cloud, servers, endpoints, identity, networks and business applications.
• Establishing secure configuration baselines using CIS Benchmarks and Microsoft security baselines.
• Engineering identity controls across MFA, Conditional Access, privileged access and least privilege.
• Building and maintaining controls across Microsoft Defender XDR, Sentinel, Intune, Entra ID and Purview.
• Working with Cloud, Infrastructure and Application teams to embed security-by-design.
• Improving logging, monitoring and alerting.
• Supporting vulnerability remediation across a complex technology estate.
• Implementing improvements identified through penetration testing, audits and security assessments.
• Providing hands-on engineering support during security incidents.
• Contributing to incident simulations and tabletop exercises.
• Developing automation and repeatable engineering processes using PowerShell, KQL and other scripting technologies.

Security Tooling

You’ll be working across a broad modern security ecosystem, with technologies including: A key part of the position will be tuning and improving these controls, increasing signal quality and reducing unnecessary operational noise for Security Operations and the external SOC.

What We're Looking For

We’re looking for somebody with around 3+ years' experience in a hands-on Security Engineering, Cyber Security Engineering, Infrastructure Security or Cloud Security position. You’ll ideally bring strong experience across:

• Microsoft Sentinel
• Microsoft Purview
• Vulnerability management – Qualys, Tenable or similar
• Cloud, server and endpoint hardening
• CIS / Microsoft / NCSC security baselines
• IAM and Conditional Access
• Privileged Access / Least Privilege
• Incident response and remediation
• Security monitoring and logging
• Working alongside Infrastructure, Cloud and wider Engineering teams.

You also need enough understanding of frameworks such as CAF, NIS2, ISO 27001, ISO 27701 and ISO 22301 to translate security requirements into practical technical controls.

Nice to Have

Additional experience in any of the following would be highly advantageous:

• AZ-500 / SC-200 / SC-300 / MS-102 / Security+
• MITRE ATT&CK / Detection Engineering / Threat Hunting
• PowerShell / KQL / Python
• 24x7 SOC or MDR environments
• Critical National Infrastructure, Utilities, Energy, Telecoms or Water

Why Join?

This is an opportunity to join a business undergoing significant growth and transformation where Cyber Security is receiving serious investment and visibility. Rather than sitting in a monitoring-focused role, you’ll have the opportunity to engineer improvements yourself – hardening environments, closing vulnerabilities, improving identity controls, tuning security tooling and working alongside specialist teams to continually strengthen the organisation’s security posture. You’ll be joining an environment with international scale, modern Microsoft security technologies and plenty of complex technical challenges.

Package

Additional Benefits