Security Engineer

Location: Liverpool (Hybrid – 3 days per week)
Salary: £40,000–£45,000 DOE + Benefits

We're representing a well-established financial services organisation in the North West that is continuing to invest heavily in its cyber security capabilities. As part of this growth, they're looking to hire a Security Engineer to join their internal Cyber Security team, helping to strengthen and mature the organisation's security posture across both on-premise and cloud environments.

This is a hands-on technical role offering exposure to a broad range of modern security technologies, working alongside infrastructure, cloud and development teams to deliver secure, resilient solutions across the business.

The Role

Reporting into the Cyber Security leadership team, you'll play a key role in implementing, maintaining and improving enterprise security technologies while supporting ongoing security projects and operational activities.

Key responsibilities include:

  • Supporting the implementation, configuration and ongoing management of enterprise security technologies.
  • Identifying opportunities to enhance existing security controls and recommending improvements to strengthen the organisation's overall security posture.
  • Working closely with infrastructure, cloud and development teams to ensure security is embedded throughout projects and operational services.
  • Managing vulnerability scanning, remediation activities and supporting penetration testing programmes.
  • Assisting with security incident investigations, response activities and post-incident reviews.
  • Contributing to security assessments, audits and compliance initiatives.
  • Supporting security reviews during change and project delivery to ensure best practice is followed.
  • Helping to promote a security-first culture across technical teams through knowledge sharing and guidance.
  • Maintaining security documentation, standards and operational procedures.
  • Keeping up to date with emerging cyber threats, technologies and industry best practice.

What They're Looking For

We're looking for someone with a solid technical foundation who is looking to continue developing their career within cyber security.

You'll ideally have:

  • Around 2+ years' experience in a hands-on cyber security or infrastructure security role.
  • A background in infrastructure, networking or systems administration.
  • Experience working with enterprise security technologies such as:
    • Firewalls
    • Endpoint Protection
    • IDS/IPS
    • Secure Web Gateways
    • Email Security
    • Zero Trust technologies
  • Knowledge of Azure security services and cloud security principles.
  • Experience with vulnerability management, security monitoring and remediation.
  • Understanding of identity and access management concepts.
  • Familiarity with common security frameworks such as:
    • NIST
    • CIS Controls
    • OWASP
    • NCSC guidance
  • Experience supporting security audits and compliance activities.
  • Strong troubleshooting skills across a range of Microsoft infrastructure technologies.
  • An interest in emerging cyber threats and security trends.

Desirable Experience

Any exposure to the following would be advantageous:

  • Financial Services or other highly regulated environments.
  • ISO 27001, PCI DSS or Cyber Essentials.
  • Microsoft Azure security tooling.
  • Microsoft 365 Security.
  • Linux administration.
  • Ethical hacking or penetration testing.
  • Kubernetes or container security.
  • Database security.
  • AI security concepts.
  • ITIL environments.

Relevant certifications are welcomed, including:

  • CCNA / CCNP
  • SSCP
  • CISSP
  • CEH
  • Microsoft Azure Security Engineer Associate
  • Microsoft Security certifications

What's on Offer

  • £40,000–£45,000 basic salary (DOE)
  • Hybrid working – 3 days per week in the Liverpool office
  • Comprehensive benefits package
  • Ongoing training and certification support
  • Exposure to modern cloud and security technologies
  • The opportunity to join a growing internal cyber security function where you'll play a genuine part in shaping and improving the organisation's security capability.