Overview
Here at Pinsent Masons we bring together the best people to get the job done. We’re naturally curious, constantly learning, listening, and growing. We’ll truly value your ideas. You’ll be joining an award-winning, hardworking and commercially minded team, where you’ll have the opportunity to work with leading experts and form meaningful relationships, while making a difference. You’ll get the opportunity to be involved in varied and challenging work. Working in an open and supportive environment, to deliver outstanding results.
Our people are our success, and we work as one team.
Role
IT Security Engineer — Manchester, Birmingham, Glasgow. This role strengthens the firm’s cyber security posture by delivering and maintaining robust technical controls across infrastructure, cloud, and application environments.
Responsibilities
* Identify and mitigate vulnerabilities, optimise security tooling, and support incident response readiness.
* Collaborate closely with architecture, development, and governance teams to embed security into solution design, ensure compliance with internal and external standards, and drive continuous improvement.
* This role can be based in Manchester, Birmingham or Glasgow; standard working hours are 9.30am-5.30pm, with flexible working requests considered.
Candidate Overview / Requirements
* IAM: Proficient in Active Directory, Microsoft Entra ID, and LDAP. Experience with RBAC and conditional access policies.
* SIEM & threat detection: Experience with Microsoft Sentinel and Defender XDR; log correlation, rule creation, false positive reduction, threat intelligence feeds; familiarity with MITRE ATT&CK.
* Network security: Knowledge of Cisco ASA, Firepower, Meraki; network segmentation, zero trust, firewall rule base management with least privilege; IDS/IPS experience.
* Cloud security: Knowledge of Azure security controls; ability to review and secure Terraform templates; understanding of CWPP.
* Vulnerability & pen testing: Experience with automated scanners (Qualys, Tenable); managing pen testing initiatives and remediation tracking.
* Automation & scripting: Scripting experience (PowerShell and/or Python); familiarity with automation platforms like Azure Logic Apps.
* MSSP integration: Experience integrating security operations with MSSPs to enhance threat detection and response.
* DevSecOps: Familiarity with SAST/DAST tools and CI/CD security testing.
What happens next?
Once your application has been submitted and reviewed, our Recruitment team will share the outcome with you by email. We typically hold two interview stages per vacancy, with virtual first stage and in-person second stage at the relevant office. We strive to remain flexible depending on the role and candidate requirements.
Commitment to diversity
Our strength lies in our differences. We are a Disability Confident and top Stonewall employer, a Valuable 500 member, signatory of the Race at Work Charter, and a partner of Neurodiversity in Law. We encourage and value different ideas and styles of thinking to deliver outstanding results.
#J-18808-Ljbffr