Senior Cyber Security Engineer

We are looking for an experienced, hands on Senior Cyber Security Engineer to take technical ownership of our security tooling and controls the first dedicated cyber security hire in a growing in house IT and Security function. Reporting directly to the Head of IT & Security, this is a high autonomy role with a genuine voice in shaping our security strategy: not executing someone else’s playbook, but helping to write it.

You will own the configuration, hardening and continuous improvement of our defensive stack across a modern Microsoft and Google estate, working hands on day to day while partnering with the wider business to keep a fast-growing, global organisation secure and resilient. As the function matures, there is a clear path for the right person to grow the role and, in time, a team around them.

What you’ll be doing

Security Operations & Tooling Ownership

• Endpoint & Device Strategy: Own the technical configuration, lifecycle management and policy optimisation of endpoint security tooling and enterprise mobile device management (MDM/MAM), namely Microsoft Intune and Defender
• Identity & Access Management: Harden and manage Identity & Access Management (IAM) baselines across our core collaboration ecosystems (including Microsoft 365, Google Workspace, macOS Platform SSO), secure application API permissions and Entra Enterprise App Registrations, and advance our email filtering policies ensuring our SPF, DKIM and DMARC records are correctly provisioned and optimal
• Network Foundations: Support network security objectives, contributing technical oversight to core networking principles, network segmentation, wireless authentication and secure access pathways

Incident Response & Vulnerability Execution

• Threat Mitigation: Act as the primary internal technical interface for our Managed Detection and Response (MDR) platform, coordinating rapid threat isolation, host containment and system tuning
• Vulnerability Lifecycle: Deploy and manage vulnerability management tooling, taking ownership of patch remediation, configuration audits and threat tracking across the estate to systematically close technical blind spots
• Resilience Planning: Assist in the design, technical testing and documentation of operational incident response playbooks and isolated system backup verification procedures
• Continuous Tuning: Maintain and optimise anti-malware and filtering controls so that security standards balance effectively against user productivity

Governance, Continuity & Collaboration

• Change Control: Adhere to and champion strict internal change control processes so that security enhancements and maintenance do not disrupt operational continuity
• Security by Design: Partner with wider business units to conduct lightweight security and technical risk assessments on new third‑party SaaS vendors and systems prior to onboarding
• Compliance Telemetry: Support the Head of IT & Security with evidence gathering, audit tracking and data telemetry to validate our ongoing cyber resilience and company disclosure obligations
• Security Culture: Promote a culture of accountability and security awareness, including the coordination and technical execution of data driven internal phishing initiatives

Skills, knowledge & expertise

• Hands on experience administering and hardening the Microsoft stack Intune, Defender for Endpoint and Entra ID as the core of a live endpoint and identity estate
• Strong working knowledge of modern identity and access management: authentication protocols, conditional access, Entra app registrations and the Principle of Least Privilege
• A track record of operating independently in a security or senior infrastructure role, comfortable owning and driving work with minimal oversight
• A clear communicator who can explain technical reasoning to non-technical colleagues and constructively challenge decisions, including upward
• Experience administering and hardening Google Workspace alongside Microsoft 365
• Familiarity with federated identity and modern authentication methods (AML/OIDC), Windows Hello for Business and macOS Platform SSO
• Working knowledge of email authentication SPF, DKIM and DMARC
• Experience working alongside an external MDR/SOC partner for detection and incident response
• A grounding in network security fundamentals, segmentation, wireless authentication and secure access ideally on Cisco Meraki
• Hands on experience with vulnerability management tooling and patch/remediation workflows
• Awareness of security governance and compliance evidence work, such as supporting audit and disclosure obligations
• Relevant certifications (e.g. Microsoft SC‑200, SC‑300 or AZ‑500, or equivalent)

What’s in it for you

• 25 days holiday (increasing with service) + Holiday Buy scheme
• Work from home every Wednesday
• Onsite café, gym and free parking
• Staff discounts across CurrentBody Skin, ZIIP Beauty, and Tria Laser
• Subsidised travel, Cycle to Work and EV/tech schemes
• Supported studies, Employee Assistance Programme and enhanced family leave
• Social events, office brunches and career development opportunities

At The Beauty Tech Group, we are committed to creating a diverse and inclusive workplace where everyone feels valued and empowered to succeed. We welcome applications from all backgrounds and experiences.

#J-18808-Ljbffr…