Senior Security Engineer

About the role

The Senior Security Engineer will report to the IT Security Officer and work within a small, dedicated security team. You will design, implement and maintain robust security controls across the organisation’s IT environment, conduct risk assessments, monitor for threats and mentor junior security staff.

Key responsibilities

• Manage the Secure Web Gateway and Email Security Gateway.
• Perform vulnerability scans, identify risks and drive remediation.
• Administer perimeter and VPN firewalls.
• Oversee MFA, SSO, MDM/MAM and Conditional Access solutions.
• Handle security certificates, keys and related lifecycle management.
• Deliver cyber‑security awareness training to staff.
• Remediate findings from penetration testing and continuous monitoring.
• Collaborate with IT teams to ensure compliance with security standards and best practices.
• Mentor and develop the IT Security Engineer.

Required profile

• Minimum 5 years of experience leading security teams and managing projects.
• Relevant certifications such as CISM, CISSP or OSCP.
• Experience in financial services or security operations centres is desirable.
• Strong written and verbal communication skills with the ability to influence cross‑functional teams.

Required skills

• CrowdStrike EDR
• Mimecast Mail Security Gateway
• Duo authentication
• Okta identity management
• Rapid7 IVM, Tenable.io or Nessus
• Palo Alto firewalls and Panorama
• Microsoft Intune and Conditional Access
• Entra ID, Microsoft Purview, Microsoft Defender
• Active Directory, DNS, Group Policy Objects (GPO)
• Cisco Secure Access, Cisco Umbrella, Cisco ASA
• Digicert certificates and Microsoft Certificate Services
• Ivanti patch management
• Kali Linux tools (NMAP, Metasploit, BurpSuite, John the Ripper)