Information Security Engineer (Endpoint Protection)

• Working pattern/flexible working: Based at our Bracknell Head Office with a flexible hybrid model (typically 1 day per week in the office, primarily Tuesdays, with ad-hoc visits as required by business needs), we support a healthy work-life balance

• On-Call: Participate in a supportive on-call rota (approx. 1 week in 6), with flexibility for leave and personal commitments

Key Responsibilities

In this hands-on technical engineering role, you will:

• Own the Endpoint Protection Ecosystem: Act as the senior engineer for our Endpoint Detection and Response (EDR) and Vulnerability Management platforms, ensuring 100% agent coverage and maximum efficacy across various operating systems.
• Optimise SentinelOne: Lead the configuration, policy tuning, and architectural evolution of SentinelOne EDR to proactively block sophisticated threats and ransomware.
• Engineering for Defence: Develop and deploy automated workflows for endpoint isolation, threat remediation, and health checks to ensure our critical security tooling remains resilient.
• Strategic Delivery: Drive the roadmap for security tool deployments, prioritising Endpoint Security while supporting integrated protections across Cloud and SaaS environments.
• Vulnerability & Hygiene: Leverage tools like Rapid7 and Google SecOps (Chronicle) to identify endpoint weaknesses and correlate telemetry for a unified view of our security posture.
• Collaborative Security: Partner with Infrastructure and DevOps teams to bake endpoint protection into the hardware lifecycle and standard builds., Our BAME Network supports Black, Asian, and Minority Ethnic Partners, celebrate their contributions and create a more inclusive workplace.

Faith & Belief

FAB (Faith & Belief) is aimed at educating, celebrating and increasing awareness of all faiths and beliefs.

Gender Equality

Promoting Gender equality, empowering Partners to overcome barriers and be more involved in topics outside of their day job.

Linkages

Our intergenerational or age network aiming to build awareness of the benefits and opportunities of an intergenerational workforce.

Pride

Our first network that we developed. Designed to support the LGBTQ+ community and their allies.

Working Parents

Our Working Parents' Network supports and inspires working parents throughout their parenting journey.

Care Experience

Providing a safe and supportive community for Partners with experience in the care system.

Carers Network

The network aims to raise awareness and support Partners who are carers, and their allies.

Ability

Championing workplace disability inclusion by creating a supportive environment and offering peer communities for those with diverse needs.

Unity

Our BAME Network supports Black, Asian, and Minority Ethnic Partners, celebrate their contributions and create a more inclusive workplace.

Faith & Belief

FAB (Faith & Belief) is aimed at educating, celebrating and increasing awareness of all faiths and beliefs.

Gender Equality

Promoting Gender equality, empowering Partners to overcome barriers and be more involved in topics outside of their day job.

Linkages

Our intergenerational or age network aiming to build awareness of the benefits and opportunities of an intergenerational workforce.

Pride

Our first network that we developed. Designed to support the LGBTQ+ community and their allies.

Working Parents

Our Working Parents' Network supports and inspires working parents throughout their parenting journey.

Care Experience

Providing a safe and supportive community for Partners with experience in the care system.

Carers Network

The network aims to raise awareness and support Partners who are carers, and their allies.

Did you know?

The Chairman of the Partnership used to keep their nominated successor written in a signed envelope in their safe!

• Extensive proven Security Engineering expertise in at least one of these core areas:

• Endpoint Security: Endpoint Detection and Response, management of platform rules, supporting agents, and service improvements
• Vulnerability Scanning: Configuration and management of Endpoint, Network, and Web App scanning. Maintaining scanning infrastructure

• Proven track record of successful agile delivery (Scrum or Kanban)

• Strong collaboration skills working with development, operations, and infrastructure teams within a security context

• In-depth working knowledge of security best practices and frameworks (e.g. Mitre ATT&CK, NIST)

Desirable skills/experience you may have

• Experience with SIEM tooling and detection development (Google SecOps/Chronicle proficiency is of specific benefit)

• Experience securing Google Cloud environments, utilising tools such as Google Security Command Center or AWS Security Hub

• Relevant Information Security certifications (e.g. CISSP) or a related degree

• Email Security: e.g. Secure Email Gateways, Phishing Protection

Leisure Learning

Enjoy learning a new skill or hobby even more by claiming up to £200 towards certain tutored courses.

(Applies to courses which you pay for in advance yourself).

PARTNER DISCOUNT

25% off at John Lewis and 20% at Waitrose. We knew you'd like this one!

(some exclusions apply). (Partner discount is only available following successful completion of your 90-day Earning Membership period once you have started).

Clubs & Societies

From arts & crafts to fishing, from skiing to running, we have so many clubs and societies bringing Partners with shared interests together.

HOLIDAY & LEAVE

Enjoy a generous holiday provision. Plenty of time for some rest and relaxation.

(The amount of holiday you'll get depends on your role and working hours. It increases over time).

PENSION & LIFE ASSURANCE

Secure your future with our comprehensive pension scheme and life assurance.

Join the Information Security Engineering team at John Lewis Partnership to help build a secure future for an iconic brand. We work to protect our customers, Partners, and business against an ever-evolving cyber threat landscape. The John Lewis Partnership's Information Security strategy is bold and ambitious. We provide a collection of security services, delivered via people, processes and technology. Working collaboratively, these services ensure that customers can shop with us efficiently, safely and securely, every single day. Our Threat Defence team is at the forefront of our cyber resilience, proactively monitoring threats, identifying vulnerabilities, and engineering robust security defences. Working in the Endpoint Protection pod, alongside the SIEM and Network pods, you'll be instrumental in developing cutting-edge capabilities and empowering our Security Operations Centre to stay ahead of the latest threats. This is a great opportunity to directly shape our security posture, getting hands-on with next-generation cyber security tools. You'll thrive in an agile, supportive, and highly collaborative team where innovation isn't just encouraged, it's expected., We're the largest employee owned business in the UK and home of our cherished brands, John Lewis and Waitrose. We're not just employees, we're Partners, driven by our purpose to build a happier world. As we look to our future, there's never been a more exciting time to join us. We're ruthlessly focused on being brilliant at retail. We continue to innovate, adapt and diversify. Never Knowingly Undersold on price, quality and service in John Lewis and passionately serving food-lovers in Waitrose. As Partners we all share the responsibility of ownership and in its rewards. We use our voices to contribute to our success, working together through the good and challenging times, holding true to our behaviours and treating everyone with kindness and respect. We all own making the Partnership somewhere we belong. Embracing our differences and creating an environment where we're free to be ourselves and can THRIVE. Growing ourselves individually, and as a collective. As Partners, we make all the difference. And, we all own it., This is where you'll be based, whether that's in a shop, distribution centre or one of our head offices. Bracknell Doncastle Road Berkshire, RG12 8YA See Commute