Senior Security Engineer in Essex

Salary: £100,000 - £140,000 per year

Requirements:

• Active UK SC clearance as a minimum, with willingness and ability to undergo DV clearance.
• Strong experience in enterprise firewalling, firewall policy, firewall hardening, and firewall management.
• Hands-on experience with Palo Alto Networks firewalls, including Panorama, GlobalProtect, App-ID, User-ID, NAT, VPN, and threat prevention.
• Experience with Cisco security technologies, including ASA, FTD, ISE, and secure routing and switching.
• Experience with Elastic Stack, Elasticsearch, Kibana, Beats, Logstash, Elastic Security, SIEM, or security monitoring.
• Experience in AWS security, public cloud security, or secure cloud infrastructure.
• Experience with VMware NSX, vDefend, distributed firewalling, or micro-segmentation.
• Experience securing on-premise infrastructure, network security, workload segmentation, and zero-trust principles.
• Experience hardening Windows Server environments, Active Directory, Group Policy, and endpoint security.
• Familiarity with CIS Benchmarks, STIGs, and practical security hardening standards.
• Experience in vulnerability management, incident response, and remediation planning.
• DevSecOps, CI/CD security, automated security testing, and policy-as-code experience.
• Strong working knowledge of TCP/IP, the OSI model, routing, VPNs, IAM, and encryption.
• Comfort working onsite in Manchester five days per week.
• Experience in secure, regulated, or high-compliance environments.

Responsibilities:

• Act as a key technical security point of contact across the platform, working closely with infrastructure, operations, engineering, and leadership teams.
• Design, configure, and improve security controls across secure infrastructure.
• Manage and harden Palo Alto Networks firewalls, including Panorama, App-ID, User-ID, NAT, VPN, and threat prevention.
• Support Cisco security technologies, including ASA, FTD, ISE, and secure routing and switching.
• Work with VMware NSX and vDefend security controls, including distributed firewall policies and micro-segmentation.
• Use Elastic Stack and Elastic Security for logging, SIEM, monitoring, threat detection, and dashboards.
• Support AWS and public cloud security across secure and regulated environments.
• Harden Windows Server environments, Active Directory, Group Policy, and endpoint configurations.
• Implement, audit, and remediate against CIS Benchmarks, STIGs, and security hardening standards.
• Support vulnerability management, incident response, root cause analysis, and remediation planning.
• Embed security into DevSecOps and CI/CD practices, including automated security testing and policy-as-code.
• Collaborate with vendors, auditors, and internal teams in a high-security environment.
• Mentor engineers and help promote a security-first culture.
• Operate at both strategic and hands-on level, advising on approach and direction while staying close to technical detail.
• Own, improve, and shape security across a critical platform.

Technologies: AWS, Active Directory, CI/CD, Cloud, Cisco, DevSecOps, ElasticSearch, Firewall, IAM, Support, Kibana, NAT, Network Security, TCP/IP, VPN, VMware, Windows.