Senior Security Engineer

• We act as a key technical security point of contact across the platform, working closely with infrastructure, operations, engineering, and leadership teams.
• We design, configure, and improve security controls across secure infrastructure.
• We work heavily across enterprise firewalling, firewall policy, network segmentation, and workload segmentation.
• We manage and harden Palo Alto Networks firewalls, including Panorama, App-ID, User-ID, NAT, VPN, and threat prevention.
• We support Cisco security technologies, including ASA, FTD, ISE, and secure routing and switching.
• We work with VMware NSX and vDefend security controls, including distributed firewall policies and micro-segmentation.
• We use Elastic Stack and Elastic Security for logging, SIEM, monitoring, threat detection, and dashboards.
• We support AWS and public cloud security across secure and regulated environments.
• We harden Windows Server environments, Active Directory, Group Policy, and endpoint configurations.
• We implement, audit, and remediate against CIS Benchmarks, STIGs, and security hardening standards.
• We support vulnerability management, incident response, root cause analysis, and remediation planning.
• We embed security into DevSecOps and CI/CD practices, including automated security testing and policy-as-code.
• We collaborate with vendors, auditors, and internal teams in a high-security environment.
• We mentor engineers and help promote a security-first culture.
• We operate at both strategic and hands-on level, advising on approach and direction while staying close to technical detail.
• We own, improve, and shape security across a critical platform.

Technologies:

• AWS
• Active Directory
• CI/CD
• Cloud
• Cisco
• DevSecOps
• ElasticSearch
• Firewall
• IAM
• Support
• Kibana
• NAT
• Network
• Security
• TCP/IP
• VPN
• VMware
• Windows, We are hiring a Senior Security Engineer for a major secure programme in Manchester, working onsite five days per week in a highly secure and regulated environment. This is a senior technical role with strategic influence, offering a salary of £100,000 to £140,000 depending on experience, plus a full employee benefits package, private healthcare, and pension. We provide the opportunity to shape security across a critical platform while working closely with experienced infrastructure, operations, engineering, and leadership teams. This role is high-impact and hands-on, with a strong focus on enterprise firewalling, Elastic/SIEM, VMware-based infrastructure, Cisco, Palo Alto, Windows hardening, and AWS/public cloud security.

• We require active UK SC clearance as a minimum, with willingness and ability to undergo DV clearance.
• We are looking for a senior hands-on security engineer, infrastructure security engineer, network security engineer, platform security engineer, cyber security engineer, DevSecOps engineer, or security-focused infrastructure specialist.
• We need strong experience in enterprise firewalling, firewall policy, firewall hardening, and firewall management.
• We want hands-on experience with Palo Alto Networks firewalls, including Panorama, GlobalProtect, App-ID, User-ID, NAT, VPN, and threat prevention.
• We require experience with Cisco security technologies, including ASA, FTD, ISE, and secure routing and switching.
• We are looking for experience with Elastic Stack, Elasticsearch, Kibana, Beats, Logstash, Elastic Security, SIEM, or security monitoring.
• We need experience in AWS security, public cloud security, or secure cloud infrastructure.
• We value experience with VMware NSX, vDefend, distributed firewalling, or micro-segmentation.
• We require experience securing on-premise infrastructure, network security, workload segmentation, and zero-trust principles.
• We want experience hardening Windows Server environments, Active Directory, Group Policy, and endpoint security.
• We require familiarity with CIS Benchmarks, STIGs, and practical security hardening standards.
• We need experience in vulnerability management, incident response, and remediation planning.
• We value DevSecOps, CI/CD security, automated security testing, and policy-as-code experience.
• We expect strong working knowledge of TCP/IP, the OSI model, routing, VPNs, IAM, and encryption.
• We require comfort working onsite in Manchester five days per week.
• We are looking for someone experienced in secure, regulated, or high-compliance environments.