Salary: £60,000 – 70,000 per year
Requirements
- Relevant operational experience as a security engineer, analyst, or similar role within a complex organisation handling sensitive or highly confidential data.
- Experience working in an out-of-hours on-call rota and in environments aligned to ISO/IEC 27001 and Cyber Essentials Plus.
- Experience assessing, triaging, and investigating security alerts, threats, and incidents.
- Experience supporting incident response activities, including containment, eradication, and recovery.
- Experience with proactive threat hunting and refining detection rules, playbooks, and tooling configurations.
- Strong experience with security technologies such as EDR, SIEM, DLP, BEC protection, and vulnerability management tooling.
- Experience supporting identity and access management, including access reviews, PAM, MFA, and SSO.
- Experience supporting data security controls, including data classification, DLP, and encryption.
- Experience supporting application security activities, including secure design reviews, SAST, DAST, software composition analysis, and vulnerability triage and remediation.
Responsibilities
- Participate in the Security Operations support rota, including out-of-hours on-call support, and assess, triage, and investigate security alerts from the SOC and other sources.
- Support incident response activities, including containment, eradication, and recovery, and help develop, test, and document incident response plans and lessons learned.
- Maintain the security tooling estate, including EDR, vulnerability management, SIEM, DLP, email security, and web security solutions.
- Support the secure configuration, monitoring, and protection of assets, networks, cloud workloads across AWS and Microsoft Azure, and emerging AI services.
- Help embed security controls and guardrails across the organisation.
- Maintain awareness of emerging threats, vulnerabilities, and industry developments to support risk assessments, security improvements, awareness initiatives, and a positive security culture.
- Contribute to the Data & Technology Transformation Programme and help introduce new technologies and security capabilities.
Technologies
- AI
- AWS
- Azure
- Cloud
- Support
- Security
- Web
About the role
We are UK Biobank, a large-scale biomedical database and research resource supporting researchers around the world to advance understanding of disease, prevention, and treatment. We are hiring two Information Security Engineers to join our growing Security team in Greater Manchester, supporting both our Cheadle and Manchester Science Park locations with hybrid working and 2 days onsite. This is a full-time role with 35 hours per week, Monday to Friday, and we expect an on-call rota to be introduced as the function grows. We offer a strong wellbeing-focused culture, opportunities for learning and development, and a wide range of benefits including 26 days annual leave plus bank holidays, holiday buy scheme, birthday leave, USS pension scheme, healthcare cash plan, enhanced family leave, cycle to work scheme, season ticket loan, professional subscriptions, training and development opportunities, free on-site gym, subsidised canteen lunches, free car parking, employee discounts, employee assistance programme, annual flu vaccination, and life assurance cover. We are committed to diversity, equality, and making reasonable adjustments so everyone can perform at their best.
#J-18808-Ljbffr…