2,801 Security Engineer jobs in the United Kingdom

• Design, implement, and manage security operations tools and infrastructure.
• Monitor security systems and analyze security alerts and logs.
• Conduct threat hunting and vulnerability assessments.
• Develop and automate security workflows and incident response playbooks.
• Lead and participate in security incident response activities.
• Collaborate with engineering teams to ensure secure system design and deployment.
• Manage and optimize SIEM, IDS/IPS, EDR, and firewall solutions.
• Stay current with the latest cybersecurity threats, trends, and technologies.
• Provide expert guidance on security best practices.
• Contribute to the overall security strategy and architecture.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Minimum of 6 years of experience in security operations or a related cybersecurity role.
• Proven expertise in SIEM, IDS/IPS, EDR, and firewall technologies.
• Strong understanding of network protocols, cloud security (AWS, Azure, GCP), and operating systems.
• Proficiency in scripting languages such as Python, PowerShell, or Bash.
• Experience with threat hunting and incident response methodologies.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and collaboration abilities.
• Relevant security certifications (e.g., CISSP, GIAC) are highly desirable.
• Ability to work effectively in a fully remote, 24/7 operational environment.

• Lead the Security Operations Centre (SOC) team, providing direction, mentorship, and performance management.
• Develop, implement, and refine SOC strategies, processes, and playbooks for threat detection and incident response.
• Oversee the operation and tuning of security monitoring tools, including SIEM, IDS/IPS, EDR, and threat intelligence platforms.
• Direct and manage incident response activities, ensuring timely and effective resolution of security breaches.
• Conduct advanced threat hunting and proactively identify potential security risks.
• Manage and improve the efficiency and effectiveness of security automation and orchestration (SOAR) tools.
• Collaborate with IT, engineering, and business units to ensure security controls are integrated and maintained.
• Develop and maintain incident response plans, playbooks, and documentation.
• Stay abreast of the latest cybersecurity threats, attack vectors, and mitigation techniques.
• Prepare regular reports on security incidents, threat trends, and SOC performance for senior management.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience.
• 7+ years of progressive experience in Security Operations, Incident Response, or SOC management.
• Demonstrated experience leading and managing a team of security professionals.
• Expertise in SIEM technologies (e.g., Splunk, ELK Stack), EDR solutions, and threat intelligence feeds.
• In-depth knowledge of network security, endpoint security, and cloud security concepts.
• Proven experience in developing and executing incident response plans and procedures.
• Strong understanding of threat hunting methodologies and tools.
• Relevant security certifications such as CISSP, GCIH, GCFA, or equivalent are highly preferred.
• Excellent analytical, problem-solving, and critical thinking skills.
• Exceptional communication, presentation, and stakeholder management abilities.
• Ability to work autonomously in a remote setting and manage team dynamics effectively.

• Deploy, configure, and manage security tools and technologies (SIEM, IDS/IPS, EDR, Firewalls).
• Monitor security systems for threats, vulnerabilities, and incidents.
• Analyze security alerts, investigate potential security breaches, and recommend mitigation strategies.
• Develop and implement automated security processes and scripts.
• Respond to security incidents, performing containment, eradication, and recovery actions.
• Collaborate with IT operations teams to ensure secure system configurations and infrastructure.
• Conduct regular reviews of security logs and system performance.
• Contribute to the development and refinement of security incident response plans and playbooks.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and defense techniques.
• Participate in security assessments and compliance audits.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• Minimum of 6 years of experience in security operations, engineering, or a similar cybersecurity role.
• Hands-on experience with SIEM platforms (e.g., Splunk, QRadar), IDS/IPS, and EDR solutions.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation.
• Strong understanding of network security principles, TCP/IP, and common security protocols.
• Experience with vulnerability management and risk assessment.
• Excellent analytical and problem-solving skills.
• Strong communication and teamwork abilities.
• Ability to work effectively in a hybrid work model.
• Relevant security certifications (e.g., CompTIA Security+, CySA+, GSEC) are beneficial.

• Design, implement, and manage security solutions, including firewalls, intrusion detection systems, VPNs, and antivirus software.
• Conduct security assessments, penetration testing, and vulnerability scanning to identify and address weaknesses.
• Develop and enforce security policies, standards, and procedures across the organization.
• Respond to security incidents, performing analysis, containment, and remediation actions.
• Monitor security systems and logs for potential threats and suspicious activities.
• Collaborate with IT teams to ensure the security of network infrastructure, servers, and applications.
• Stay current with emerging cybersecurity threats, vulnerabilities, and technologies.
• Develop and deliver security awareness training to employees.
• Maintain up-to-date documentation of security systems and protocols.
• Assist in the development and testing of disaster recovery and business continuity plans.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Proven experience as an Information Security Engineer or in a similar cybersecurity role.
• Strong understanding of network security principles, protocols, and technologies.
• Hands-on experience with security tools such as SIEM, IDS/IPS, firewalls, and endpoint security solutions.
• Proficiency in scripting languages (e.g., Python, PowerShell) for security automation is a significant advantage.
• Relevant certifications such as CISSP, Security+, or CEH are highly preferred.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication abilities.
• Ability to work autonomously and manage time effectively in a remote setting.
• A commitment to continuous learning and professional development in the cybersecurity field.

• Implement and manage security technologies (firewalls, IDS/IPS, SIEM, EDR).
• Conduct vulnerability assessments and penetration testing.
• Participate in incident response activities and forensic analysis.
• Monitor security alerts and system logs for threats.
• Develop and maintain security policies and procedures.
• Ensure compliance with security standards and regulations.
• Provide security awareness training and guidance.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Proven experience as an Information Security Engineer or similar role.
• Strong knowledge of network security, system administration, and cloud security.
• Experience with security tools and technologies.
• Excellent analytical, problem-solving, and communication skills.
• Familiarity with cybersecurity frameworks (e.g., NIST, ISO 27001).

Role Title: Security Engineer
Start Date: ASAP
End Date: 31st Mar 2026
Location: South of Manchester or Glasgow - 3 days on site per week
Rate: 600 per day - PAYE via Umbrella Only

Role Overview:
We are seeking a highly capable Security Engineer to join a focused team developing a telemetry pipeline MVP. This role requires deep technical expertise in containerised environments, observability tooling, and secure infrastructure design. The ideal candidate will ensure that security is embedded across the pipeline architecture, from deployment to data flow, while collaborating closely with DevOps and development teams.

Key Responsibilities:

• Design and implement security controls across containerised environments using Kubernetes and OpenShift
• Ensure secure configuration and access management within GitLab version control and CI/CD pipelines
• Integrate and secure telemetry tools including Cribl, Elastic, Splunk, Fluentd, and Syslog
• Conduct threat modelling, vulnerability assessments, and risk analysis for the telemetry pipeline
• Collaborate with DevOps engineers to embed security into infrastructure-as-code and deployment workflows
• Monitor and respond to security events and alerts from observability platforms
• Maintain documentation of security architecture, policies, and incident response procedures

Required Skills & Experience:

• Strong hands-on experience with Kubernetes and OpenShift in secure production environments
• Proficiency in GitLab and secure CI/CD pipeline practices
• Familiarity with telemetry and logging tools: Cribl, Elastic, Splunk, Fluentd, and Syslog
• Deep understanding of networking protocols, firewalls, VPNs, and security principles
• Experience with security frameworks (e.g., NIST, ISO 27001) and compliance requirements
• Knowledge of container security tools (e.g., Aqua, Twistlock, Trivy) and vulnerability scanners
• Excellent analytical and communication skills

Preferred Qualifications:

• Certifications such as CISSP, CISM, CKS (Certified Kubernetes Security Specialist), or equivalent
• Experience in building MVPs or working in startup-like environments
• Familiarity with cloud security (AWS, Azure, GCP)