IT Infrastructure and Security Engineer

As the IT Infrastructure and Security Engineer, you’ll oversee Bulk’s IT infrastructure and security posture, creating a resilient technical foundation while supporting AI adoption across the business. This role blends hands-on infrastructure management and cyber defence with strategic improvements, threat management, and compliance. You’ll also partner with senior leadership to optimise key toolsets that drive Bulk’s ongoing growth., * Oversee the planning, design, implementation, monitoring, and maintenance of Bulk’s IT infrastructure, including on-premise and cloud-based systems (Google Workspace, Azure, network, firewall, VPN, etc).

• Ensure system reliability, resilience, performance, and secure configuration, and updates, adhering to industry best practices.
• Lead infrastructure projects, from capacity planning to deployment, to support evolving business requirements.
• Support 2nd and 3rd line issues, guiding troubleshooting and resolution in line with SLAs
• Create and maintain technical documentation, policies, and procedures, ensuring smooth handover to Service Desk teams.
• Lead the incident response lifecycle, including managing security incidents and data breach containment, eradication, and post-mortem analysis.
• Serve as a dedicated Tier 3 escalation point for the Helpdesk team, providing expert advanced technical support and resolution for complex incidents.

AI Tooling & Enablement

• Own the setup, configuration, and maintenance of AI tooling across the business (e.g., Claude Code, Cowork, Codex-style coding/agent tools), including integrations, MCP server configuration, and connector management.
• Manage user access, permissions, and governance for AI tools, ensuring least-privilege access and secure connector/integration setup.
• Partner with teams to onboard new AI tools and integrations, balancing productivity gains with security and compliance requirements.

Cybersecurity

• Develop and implement security measures to protect Bulk’s IT environment, continuously enhancing the security framework.
• Monitor, investigate, and remediate security alerts, incidents, and Indicators of Compromise (IOCs).
• Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities.
• Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE).
• Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials, ISO 27001).
• Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.
• Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.

• Bachelor’s degree in Cybersecurity, IT, or a related field; relevant certifications (e.g., CISSP, CISM, CompTIA, ITIL).
• 3+ years’ experience in infrastructure and security management within a medium-sized enterprise.
• Proficient in networking, cloud, and endpoint security technologies, including CrowdStrike, Cisco, Azure, VSphere, Windows Server, Mac/Windows, Jamf/Intune MDMs Automox, and VPNs.
• Hands-on experience with infrastructure management, cloud solutions (Azure, Google Workspace), and security frameworks.
• Strong knowledge of security monitoring, incident response, and threat analysis, including managing IOCs and remediation.
• Experience with compliance standards (e.g., Cyber Essentials, ISO 27001) and conducting vendor security assessments.
• Experience setting up and administering AI coding/agent tools (e.g., Claude Code, GitHub Copilot, Codex) and their integrations, including MCP servers, connector permissions, and access management.

Desirable Skills

• ITIL and project management certifications (e.g., Prince2).
• Advanced knowledge of infrastructure best practices and proactive problem-solving skills.
• Experience working with Netskope.
• Familiarity with emerging AI infrastructure patterns (agentic tools, MCP, connector-based integrations) and associated access control best practices.
• Excellent communication and team leadership abilities.
• Hands-on experience with Netskope CASB/SSE, including SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design, and SCIM-based provisioning to support enterprise cloud security.

All our teammates have a PerkBox subscription which includes free cinema tickets, free coffee’s on the go and amazing discounts!

• 60% discount Our teammates love our products - so we give 60% discount!

• Additional Annual Leave Rest & Recovery is important! Purchase up to 3 additional annual leave days.

• Pension We offer a workplace pension to all our teammates.

• Cycle to Work Scheme The commute to work is just a cardio workout, right?

• Happy Hour Grab a drink and enjoy our Happy Hour every Thursday and Friday afternoon.

• Bulk Pantry We know all of our teammates love our products and so we give them to you. All we ask is just for a small charity donation in return.

• Summer Hours ️ Because we all need that Vitamin D