About the Role

We are looking for a skilled Security Engineer to design, build, and operate enterprise-grade security platforms.

This is a hands-on engineering role where you will play a critical part in strengthening organisational security posture through the implementation of robust controls, platforms, and frameworks aligned to regulatory and compliance obligations. You will work across complex environments to protect sensitive data, critical systems, and customer assets against evolving cyber threats.

This role is ideal for someone who thrives in mature governance ecosystems, where risk, compliance, and security engineering intersect to deliver secure-by-design outcomes.

Key Responsibilities:

• Design, implement, and operate security platforms spanning:
• • Endpoint Detection & Response (EDR)
  • Data Loss Prevention (DLP)
  • Email and Web Security
  • Vulnerability Management
  • Cloud Security (CSPM/CWPP)
• Ensure solutions align with enterprise security standards, regulatory frameworks, and internal governance controls
• Contribute to the development of security guardrails, policies, and technical standards
• Embed risk-based security controls across systems and applications

Risk, Compliance & Assurance

• Translate technical vulnerabilities into business risk to support governance decision-making
• Ensure alignment with recognised frameworks such as NIST, CIS Controls, Zero Trust, and MITRE ATT&CK
• Support audit, regulatory, and assurance activities through strong documentation and evidence-based practices
• Drive risk-based vulnerability management, including prioritisation, remediation tracking, and SLA adherence

Engineering & Innovation

• Build and deploy modern, automated security solutions to detect and respond to threats
• Develop security tooling, automation, and integrations to improve operational efficiency
• Conduct proof-of-concepts and technology evaluations aligned to enterprise and regulatory requirements
• Stay ahead of emerging threats, vulnerabilities, and attack methodologies

Stakeholder Engagement

• Partner with Security Operations, Risk & Assurance, Data Governance, and Architecture teams
• Provide expert guidance on security design in complex, regulated environments
• Collaborate with vendors, MSSPs, and strategic partners

What We’re Looking For:

• 5+ years in Security Engineering or Cyber Security roles
• Proven experience working within highly regulated industries (e.g. healthcare, finance, insurance, government)
• Strong understanding of security governance, risk management, and compliance frameworks

• Deep experience across multiple domains:
• • Endpoint Security (EDR, application control)
  • SIEM platforms (Splunk, Sentinel, Elastic)
  • Vulnerability management tools (Nessus, Qualys, Rapid7)
  • Network security (Firewalls, IDS/IPS)
  • Data protection and email/web security tools
• Experience implementing policy-driven and risk-based security controls
• Knowledge of cloud security and modern enterprise architectures

• Strong understanding of:
• • Risk assessments and threat modelling
  • Control design and assurance
  • Regulatory obligations and audit readiness
• Ability to operate effectively in environments with strict governance, compliance, and reporting requirements

Attributes:

• Strong analytical and problem-solving skills
• Ability to communicate complex technical concepts to business stakeholders
• Detail-oriented with a focus on documentation and auditability
• Collaborative mindset with ability to influence across teams
• Passion for continuous learning and staying ahead of cyber threats