At a Glance
- Tasks: Lead and manage security platforms, ensuring optimal configuration and continuous improvement.
- Company: Join a leading Group Cyber Security team with a global presence.
- Benefits: Enjoy a competitive salary, car allowance, health benefits, and matched pension contributions.
- Other info: Hybrid working model with opportunities for career growth and development.
- Why this job: Make a real impact in cyber security while working with cutting-edge technologies.
- Qualifications: 8+ years in cyber security with hands-on platform engineering experience.
The predicted salary is between 84000 - 100000 £ per year.
Location: London; Working pattern: 37.5 hours per week, Monday – Friday. Hybrid working arrangements; location London/Peterborough with potential travel to divisional sites as required by advisory engagements.
Salary: £84,000 - £100,000. Benefits: Car allowance, Bupa, matched pension contributions.
Overview: The Group Cyber Security (GCS) team manages cyber risk across the Group, operating a federated model spanning 11 divisions and over 50 countries. GCS sets cyber standards, measures compliance, and delivers centrally managed security services. The Cyber Advisory Services function translates Group standards into divisional context.
Role Summary: Reporting to the Deputy Group CISO, the Security Platform Engineering Manager is the technical owner and custodian of the Group’s security tooling portfolio. This role ensures platforms are configured correctly, exploited fully, evolved continuously, and deliver security outcomes and ROI. The role is hands-on, curious, and proactive, with in-depth knowledge of the platform capabilities and vendor roadmaps. Platforms in scope include Microsoft Defender (M365 Defender suite), Zscaler, Qualys, Abnormal Security, Axonius, and other centrally managed security technologies as the portfolio evolves.
Role Responsibilities / Accountabilities:
- Security Platform Ownership & Technical Stewardship: Act as the technical product owner for each platform in the GCS security tooling portfolio; take accountability for health, configuration, and ongoing development. Maintain deep technical knowledge of each platform, including capabilities, vendor roadmaps, and potential new use cases. Ensure platforms are configured to their optimal state; enforce policies, enable licensable features, and avoid unused capabilities without documented rationale. Identify opportunities to apply platform capabilities to business or security problems before new expenditure is considered.
- Technical Configuration, Policy & Security Standards Alignment: Own and maintain technical configuration baselines; document, version-control, change-manage, and audit platform configurations; translate Group standards into enforceable settings. Align configurations with the Group’s cyber enterprise architecture; flag divergences between as-built and as-designed states. Provide expert technical guidance to divisional IT and security teams on deployment and configuration to meet standards while accommodating divisional requirements.
- Platform Roadmap Development & Lifecycle Management: Develop and own a rolling platform development roadmap; align with cyber strategy, vendor roadmaps, and SOC/business requirements. Lead platform replacement or consolidation assessments; work with the Cyber Architecture Manager on business cases and transition plans. Ensure roadmaps integrate with the Group CTO technology strategy and architecture roadmap; surface dependencies and opportunities early. Maintain visibility of licence entitlements; optimise license usage and provide evidence-based renewal recommendations.
- Vendor Engagement, Partnership & Return on Investment: Build relationships with vendor technical and commercial teams; gain early access to roadmaps and best practices. Ensure maximum value from each platform; track ROI and present findings to Deputy CISO and senior stakeholders based on security outcomes. Collaborate with vendors to address gaps; escalate issues, influence product direction, and ensure value from services. Provide input to contract renewals, procurement decisions, and licence negotiations with operational evidence.
- SOC, Operations & Stakeholder Alignment: Work with SOC and security operations to tune platforms for detection, investigation, and response; act as primary technical escalation for platform issues affecting SOC. Participate in prioritisation with SOC, operations, architecture, and leadership to focus engineering on impactful changes. Collaborate with the Group CTO function to integrate platform plans with broader IT strategy; surface cross-functional dependencies. Coordinate with Cyber Architecture Manager to ensure engineering aligns with the enterprise architecture and participates in design authority decisions.
- Team Leadership & Resourcing: Lead, develop, and motivate a small team of permanent engineers and flexible resources; set expectations and foster technical excellence. Prioritise deployment of engineering resources across platform portfolio and project demand; balance BAU with transformation work. Encourage knowledge sharing, documentation, and runbooks to reduce key-person dependency.
- Transformation, Continuous Improvement & Innovation: Lead engineering delivery for the GCS transformation programme for platforms in scope; minimise business and SOC disruption. Promote continuous improvement; review configurations and performance, driving incremental improvements routinely. Stay current with platform and product engineering trends; present evidence-based innovations to leadership.
Experience, Knowledge, Skills & Attributes:
- Essential Experience: 8+ years in cyber security with hands-on experience in security platform engineering, security operations technology, or equivalent. Deep technical expertise in at least two platforms including configuration, policy management, and tuning. Experience as a platform/product owner for enterprise security technology, including managing configurations, licences, vendor relationships, and roadmaps. Experience partnering with a SOC to understand how platform configuration affects detection and analyst effectiveness. Experience managing a small technical team, including line management and contractor resources. Experience managing vendor relationships for strategic security products, including technical reviews and renewal input.
- Knowledge & Skills: Genuine technical curiosity and product passion; ability to understand platform depth and apply it to problems. Strong working knowledge of the Microsoft security stack. Understanding of security platform integration patterns and how to design integrations for efficiency and detection. Ability to communicate status, recommendations, and roadmap to technical and senior non-technical stakeholders; evidence-based investment cases. Commercial awareness of licence terms, features, and security outcomes; ability to engage in vendor and procurement discussions.
- Qualifications: Degree-level education in computer science, information security, or related field; or equivalent experience. Relevant professional certification: CISSP, CISM, CompTIA Security+, or vendor-specific certifications.
Desirable Experience:
- Experience in a large FMCG, retail, or FTSE-listed manufacturing organisation; understanding federated, multi-divisional estates.
- Experience managing full platform lifecycle from procurement to replacement in an enterprise security product.
- Technical lead or engineering management experience within a managed SOC or MSSP environment.
- Experience in formal M365 E5 or enterprise security deployment programs, including migrations from legacy tooling.
- Hands-on experience with security automation and orchestration.
- Familiarity with OT/ICS security monitoring tools and understanding of applying enterprise security to OT environments.
- Understanding of CAASM platforms for continuous controls visibility and asset inventory accuracy.
- Understanding of identity security concepts and their interaction with Defender/Zscaler.
- Awareness of broader security tools and integration considerations.
- Advanced vendor certifications across multiple platforms and membership in professional bodies welcomed.
Security Platform Engineering Manager employer: Information Security Solutions
As a Security Platform Engineering Manager at our London location, you will join a dynamic and innovative team dedicated to managing cyber risk across a global landscape. We offer a supportive work culture that prioritises employee growth through continuous learning opportunities, competitive benefits including a car allowance and Bupa healthcare, and a hybrid working model that promotes work-life balance. Our commitment to fostering technical excellence and collaboration ensures that you will thrive in your role while making a meaningful impact on our security initiatives.
Contact Details:
Information Security Solutions Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land Security Platform Engineering Manager
✨Tip Number 1
Network like a pro! Attend industry meetups, webinars, and conferences to connect with folks in the cyber security space. You never know who might be looking for someone just like you!
✨Tip Number 2
Get your hands dirty! If you can, work on personal projects or contribute to open-source security tools. This not only sharpens your skills but also gives you something impressive to talk about in interviews.
✨Tip Number 3
Prepare for those tricky interview questions! Research common questions for Security Platform Engineering roles and practice your responses. We want you to feel confident and ready to showcase your expertise.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are proactive about their job search!
We think you need these skills to ace Security Platform Engineering Manager
Some tips for your application 🫡
Tailor Your CV:Make sure your CV reflects the specific skills and experiences that match the Security Platform Engineering Manager role. Highlight your hands-on experience with platforms like Microsoft Defender and Zscaler, and don’t forget to mention any relevant certifications!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you’re passionate about cyber security and how your background makes you the perfect fit for our team. Be sure to connect your past experiences with the responsibilities outlined in the job description.
Showcase Your Technical Expertise:In your application, don’t shy away from showcasing your technical knowledge. Discuss your familiarity with security platform integration patterns and how you've applied them in previous roles. This will help us see your depth of understanding and problem-solving skills.
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way to ensure your application gets into the right hands. Plus, it shows us you’re genuinely interested in joining our team at StudySmarter!
How to prepare for a job interview at Information Security Solutions
✨Know Your Platforms Inside Out
Make sure you have a deep understanding of the security platforms mentioned in the job description, like Microsoft Defender and Zscaler. Be ready to discuss their capabilities, configurations, and how they can solve business problems. This shows your technical expertise and genuine interest in the role.
✨Align with Cyber Strategy
Familiarise yourself with the company's cyber strategy and how the security tooling portfolio fits into it. Prepare to discuss how you would align platform roadmaps with broader technology strategies and what steps you would take to ensure compliance with Group standards.
✨Showcase Your Leadership Skills
As a Security Platform Engineering Manager, you'll be leading a team. Be prepared to share examples of how you've motivated and developed teams in the past. Highlight your experience in managing vendor relationships and how you’ve driven ROI from security platforms.
✨Prepare for Technical Scenarios
Expect technical questions or scenarios during the interview. Brush up on your problem-solving skills related to platform configuration and policy management. Think about how you would handle specific challenges, such as tuning platforms for detection or addressing gaps with vendors.
