Information Security Engineer

Information Security Engineer

Location: London

Salary: £57,000–£67,000 per annum

Working pattern: Hybrid – up to 2 days working from home

Contract: Permanent

Are you a hands-on Information Security Engineer looking for an opportunity to take ownership of security, drive improvements and make a meaningful impact in a highly regulated environment?

We’re working with a leading organisation that is investing significantly in its technology, infrastructure and cybersecurity capabilities.

As part of a globally recognised group, the organisation is strengthening its security function and looking for an Information Security Engineer to play a key role in protecting its systems, data and services.

This is an exciting opportunity for an experienced security professional to take on greater responsibility, work closely with a wider group cybersecurity team and help shape the development of security practices.

You’ll combine hands-on technical delivery with security monitoring, vulnerability management, risk assessment and continuous improvement, working collaboratively with infrastructure, applications and wider technology teams.

As Information Security Engineer, you’ll be responsible for implementing, maintaining and improving technical security controls across the organisation. You’ll help identify and address vulnerabilities, investigate potential security incidents and ensure systems are configured securely.

Working closely with both local IT colleagues and the wider group security function, you’ll have the opportunity to identify gaps, recommend improvements and take ownership of initiatives that strengthen the organisation’s security posture.

Responsibilities

• Manage vulnerability scanning, prioritisation, remediation tracking and reporting, ensuring security weaknesses are addressed effectively.
• Monitor security tools and alerts, supporting the detection, investigation and response to potential security incidents.
• Conduct technical investigations, root cause analysis and post-incident reviews, recommending improvements to prevent recurrence.
• Implement and maintain security controls across endpoints, networks, servers, cloud services and clinical systems.
• Support endpoint protection, email security, identity and access management, multi-factor authentication (MFA) and security logging.
• Work with infrastructure and applications teams to improve system hardening, secure configurations and overall security resilience.
• Review technical designs, projects and infrastructure changes, identifying security risks and providing practical recommendations.
• Support compliance with relevant data protection legislation, security standards and regulatory requirements, including GDPR and NHS Data Security and Protection Toolkit principles where applicable.
• Maintain security documentation, procedures, technical standards and audit evidence.
• Engage with third-party suppliers, managed security providers and group cybersecurity colleagues to resolve issues and drive improvements.
• Communicate security risks, remediation plans and technical recommendations clearly to both technical teams and senior stakeholders.

You’ll be a technically capable security professional who enjoys getting hands-on, solving problems and taking ownership of security improvements. You’ll be comfortable working independently while collaborating with wider IT and security teams.

You’ll ideally bring:

• Previous experience in a dedicated information security, cybersecurity or security engineering role.
• Strong practical knowledge of technical security controls across endpoints, networks, servers and cloud environments.
• Experience managing vulnerabilities, interpreting scan results, prioritising risks and coordinating remediation.
• Experience with security monitoring, alert investigation and incident response.
• Knowledge of Microsoft security technologies, ideally including Microsoft Defender, Microsoft 365, Microsoft Entra and identity security controls.
• An understanding of MFA, endpoint protection, email security, system hardening and security logging.
• Experience working within a regulated environment, with an understanding of data protection and information security compliance.
• The ability to assess technical risks and translate them into clear, proportionate recommendations.
• Strong communication skills, a proactive approach and the confidence to work with stakeholders across different levels of the organisation.

Professional certifications are desirable rather than essential. Support and funding for ongoing training and development are available.

The organisation operates a predominantly Microsoft-based environment, including Microsoft Defender, Microsoft 365, Microsoft Entra and Microsoft Purview, alongside a wider infrastructure estate incorporating Azure Local, VMware, Linux, Palo Alto and Cisco technologies.

You’ll have the opportunity to develop your expertise across this environment while working with the wider group cybersecurity function.

This is an opportunity to make a genuine impact in an organisation where security is becoming an increasingly important priority.

You’ll benefit from:

• A competitive salary of £57,000 – £67,000.
• Hybrid working, with up to two days working from home.
• A permanent role offering stability and long-term development.
• Exposure to a wider, established group cybersecurity function.
• The opportunity to take ownership of security improvements and influence how security is delivered locally.
• Access to training, professional development and support towards relevant certifications.
• A comprehensive benefits package, including 25 days’ annual leave plus bank holidays, increasing with length of service.
• Company pension scheme, interest-free travel loan and bicycle loan scheme.
• Private healthcare eligibility after 12 months of service.
• Retailer discounts and an Employee Assistance Programme.

If you’re an Information Security Engineer who enjoys solving technical challenges, strengthening security controls and taking ownership of improvements, we’d love to hear from you.