Security Engineer – Infrastructure & Network Security

About the role

We are seeking an experienced Security Engineer to join a fast‑growing technology business in Manchester. The role is hands‑on, focusing on protecting complex on‑premise infrastructure and hybrid‑cloud environments within a highly regulated setting.

Key responsibilities

• Implement and maintain security controls across on‑premise VMware infrastructure.
• Configure and optimise VMware NSX, distributed firewall policies and micro‑segmentation, including use of VMware vDefend for zero‑trust.
• Manage Palo Alto next‑generation firewalls – policy creation, threat‑prevention, NAT and VPN.
• Secure Windows Server, Active Directory and Group Policy following CIS Benchmarks, STIGs and other hardening standards.
• Support security monitoring, logging, alerting and incident response using Elastic Stack and Elastic Security.
• Contribute to vulnerability management, root‑cause analysis and remediation activities.
• Embed security into operational processes and DevSecOps practices across VMware Cloud Foundation, AWS, Azure and GCP.
• Collaborate with engineering teams, vendors, auditors and internal stakeholders.

Required profile

• Strong hands‑on experience in security engineering, infrastructure or network security.
• Proven expertise with VMware NSX, micro‑segmentation and distributed firewalls.
• Experience with VMware vDefend or similar VMware security technologies.
• Solid background configuring Palo Alto firewalls.
• Extensive knowledge of Windows Server, Active Directory and Group Policy security.
• Familiarity with CIS Benchmarks, STIGs or comparable hardening frameworks.
• Understanding of zero‑trust principles, IAM, encryption and secure architecture.
• Active UK Government SC clearance (eligible for Developed Vetting).

Required skills

• VMware NSX
• VMware vDefend
• Palo Alto Networks firewalls
• Cisco networking fundamentals
• Windows Server
• Active Directory
• Group Policy
• CIS Benchmarks / STIGs
• Elastic Stack (Elasticsearch, Kibana, Logstash)
• Elastic Security
• Vulnerability management tools
• Cloud platforms: AWS, Azure, GCP

What we offer

• Salary £75,000–£90,000 per year, dependent on experience.
• Bonus and comprehensive company benefits.
• Full‑time, five days per week onsite in Manchester.
• Occasional UK travel.
• Professional development in a regulated, high‑security environment.