Security Engineering Lead
Location: Based onsite at our HQ in Manchester (WA15 0AF)
Reports to: Deputy Chief Security Officer
Team: Leads a team of 3 to 4 Security Engineers
Type: Permanent, full-time
About the Role: We are seeking a Security Engineering Lead to take ownership of our security tooling and lead a dedicated team of engineers. You will set the technical direction for the function, manage and develop the team, and remain hands‑on to make sound decisions on architecture and design. Our security tooling is managed entirely as Infrastructure as Code, so the role demands fluency in repositories, pipelines, and security platforms. Candidates who can apply AI to practical effect are highly desirable. The role partners closely with the wider security function, engineering, and the business, and engages directly with external parties, including vendors, auditors, and partners.
Key Responsibilities
- Lead a team of 3 to 4 security engineers, setting standards, overseeing delivery, and supporting their development.
- Own the design, implementation, and operation of our security tooling, managed entirely as code.
- Advance automation across detection, response, and access tooling to reduce manual effort and improve consistency.
- Define the technical roadmap for security tooling and keep it aligned with engineering and business priorities.
- Apply AI to strengthen detection, triage, and automation to improve team effectiveness.
- Lead the engineering aspects of incident response and manage escalations for the tooling your team owns; participate in an on‑call and out‑of‑hours rota.
- Collaborate with other security teams (SOC, GRC, AppSec, vulnerability management) and with platform and engineering teams to embed security from the outset.
- Represent security engineering to external stakeholders, including vendors, auditors, and partners.
Security Stack
- Detection and response: SIEM, SOAR, EDR
- Network and web: Secure Web Gateway (SWG), DLP
- Access: Zero Trust Access, IAM
- Cloud: AWS, GCP, Azure
- Email: Secure Email Gateway
- Pipelines: GitHub (CI/CD security, secrets, supply‑chain controls)
Essential Skills And Experience
- Experience in security engineering or related roles.
- Strong hands‑on experience across several areas, such as SIEM/SOAR, Zero Trust access, IAM, DLP, and EDR.
- Experience securing cloud environments such as AWS, GCP, or Azure.
- Skilled in planning, designing, and implementing enterprise‑level security solutions.
- Substantial Infrastructure as Code experience (e.g., Terraform) managing security tooling declaratively and under version control.
- Experience securing CI/CD pipelines, ideally GitHub, including Actions, secrets management, and supply‑chain security.
- Practical experience applying AI within security workflows or tooling.
- A demonstrable record of working across teams, both within security and alongside engineering and external stakeholders.
- A clear communicator, able to convey technical risk to both engineering and non‑technical audiences.
- Knowledge of industry best practice and frameworks such as ISO 27001, IEC 62443, NIST Cyber Security Framework, CIS Critical Security Controls, and MITRE ATT&CK.
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- Certifications such as CISSP, CISM, or similar.
Desirable
- Experience leading or line‑managing a security team.
- Scripting or development experience (Python, Go, or similar) for automation.
- Experience in a regulated or e‑commerce environment, including PCI DSS and Cyber Essentials Plus.
- Detection engineering or threat‑hunting experience.
- Container and Kubernetes security experience.
- Experience presenting to and reporting to senior leadership.
- Further cloud security certifications, such as AWS, GCP, or Azure security specialties.
THG Ingenuity is proud to be a Disability Confident Committed employer. If you are invited to interview, please let us know if there are any reasonable adjustments we can make to the recruitment process that will enable you to perform to the best of your ability.
THG Ingenuity is committed to creating a diverse & inclusive environment and welcomes applications from all sections of the community.
#J-18808-Ljbffr…