11537SJR-R
£65k – 75k per year
Senior Cyber Security Engineer
Reading/Hybrid (one day per week in the office)
Salary: £65,000-£75,000
We are working with a leading UK pensions and insurance consulting and administration business. A FTSE 250 company, our client works with over 1,400 pension schemes, administers over one million member accounts, and supports insurance companies in the life and bulk annuities sector.
ABOUT THE ROLE
You will join an expanding cyber security team working alongside internal engineers, security operations analysts, and an external 24/7 SOC. Reporting to the Cyber Security Engineering Manager, you will carry out daily security engineering tasks and lead security hardening projects to protect our client’s IT infrastructure, networks, and data.
RESPONSIBILITIES
1. Provide expert technical security guidance covering IT assets, change control, security testing, secure systems design, and security controls
2. Own and develop the vulnerability management programme, with a focus on application security testing, web application firewalls, and securing development pipelines
3. Mentor and provide security direction to other team members
4. Carry out security engineering tasks to agreed SLAs/KPIs using ITIL best practice
5. Develop understanding of threats, risks, and evolving attack vectors facing the business
6. Represent the security team as subject matter expert in meetings and projects
7. Support the operations team with security incident investigation in complex cross-technology environments
8. Assist with security training and awareness campaigns, market reviews, supplier assessments, and client security questionnaires
ESSENTIAL REQUIREMENTS
9. Right to work in the UK
10. Strong experience in web application security, vulnerability management, penetration testing, and hardening IT systems
11. Experience with cloud hosting, cloud migration, application testing, and working with developers to improve security
12. Solid knowledge of security products including WAFs, SIEM, AV, email/web gateways, firewalls, load balancers, ACLs, TCP/IP, routing, and switching
13. Familiarity with OWASP, SASE, zero-trust, and risk-based vulnerability management
14. Background in infrastructure and networks
15. Working towards or holding CISSP, SANS GCIA, CompTIA Security+, CCNA/CCNP or equivalent
16. Excellent written and verbal communication skills, including network diagramming
17. Willingness to travel to other sites as required
DESIRABLE
18. Computer Science degree or equivalent experience
19. Knowledge of ISO27001, Cyber Essentials, and AAF control frameworks
BENEFITS
Competitive salary, discretionary annual bonus, 25 days holiday (with buy/sell option), flexible bank holidays, matched pension contributions, healthcare cash plan, flexible benefits scheme, life assurance (4x salary), retail discounts, Employee Assistance Programme, digital GP service, paid volunteering day, and staff referral scheme.
Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.
Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation