Security Engineer

The Cheshire West and Chester Council Digital, Data and Technology (DDAT) department has recently undergone a huge transformation and is looking for a Security Engineer to lead the protection of the Councils’ hosting, networks, and data infrastructure. The post holder will support the implementation and maintenance of the systems used to protect computer systems and networks and track incidents., * Lead day to day operational security across the DDaT service, including incident response, cross team coordination, security assessments, vulnerability scanning and code audits

• Identify and resolve security vulnerabilities by developing technical solutions, researching emerging threats, building threat models and driving automation of security improvements
• Oversee phishing testing and awareness activity, working with the security analyst team and reporting outcomes to senior management
• Support the development and continuous review of cyber security policies, ensuring they remain effective in a changing threat landscape
• Act as the main point of contact for operational security matters, providing guidance and support across the council and monitoring security tools to manage risks effectively
• Participate in the out of hours rota, responding to alerts and incidents raised by the SOC

We are seeking a skilled and motivated cyber security professional with a strong technical background, supported by a degree in Computer Science, Cybersecurity or equivalent experience, and relevant industry certifications such as CISSP, CISM, CompTIA Security+ or CISA. You will bring proven experience in securing network and infrastructure environments, including firewalls, encryption, VPNs and endpoint protection, alongside hands on experience of vulnerability identification and remediation, for example through penetration testing and threat analysis. A solid understanding of security tools, monitoring, reporting and auditing, as well as familiarity with ISO27001 and modern practices such as patch management and DevOps or SecOps, is essential.

You will have practical experience of protecting a range of systems and data platforms, including Windows and legacy environments, and be confident in monitoring network activity to detect and prevent intrusion. The ability to write secure code, for example in Python or similar languages, to support automation and continuous improvement is important, along with up to date knowledge of emerging threats and attack methods.

You will be a strong communicator and collaborator, able to explain technical concepts clearly to a range of audiences and build effective working relationships across the organisation and with external partners. You will be self motivated, resilient and able to manage competing priorities in a fast paced environment, using sound judgement to balance business needs and technical constraints while delivering practical, innovative solutions. Experience within local government or in roles such as a security analyst or penetration tester would be advantageous.