> Markdown version of [/jobs/ext/2238896-it-security-engineer](https://www.wearedevelopers.com/jobs/ext/2238896-it-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Engineer - **Company:** SR2 - **Location:** UK (Remote available) - **Experience:** Experienced - **Salary:** £45,000.0 - £50,000.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Identity and Access Management, Phishing, Security Information and Event Management, Software Vulnerability Management, Scripting, Cybercrime, Performance Monitor, Vulnerability Analysis - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815152543-it-security-engineer ## About the Role * 3+ years in security operations / cybersecurity engineering (or strong IT ops experience with security ownership) * Strong understanding of vulnerability management processes and risk-based prioritisation * Familiarity with email + endpoint security controls (e.g., Defender-style toolsets, phishing controls, email security) * Awareness of IAM concepts: MFA, conditional access, privileged access/PIM * Comfortable working with technical teams to get remediation delivered (patching cycles, change, infrastructure support) * Clear communicator who can explain risk to both technical and non-technical stakeholders * Bonus points for: SIEM exposure, threat hunting, cloud security, automation/scripting, infrastructure/networking ## Description IT Security Engineer (Hybrid: 3 days on-site in Hertfordshire / 2 days remote) | £45-50k | Permanent SR2 is partnering with a well-established, member-owned UK organisation to hire an IT Security Engineer to strengthen cyber resilience and improve day-to-day security operations. This is a hands-on role sitting within IT, working closely with infrastructure and support teams to embed security into BAU and projects. What you'll be doing * Own day-to-day vulnerability monitoring and remediation, including maintaining a vulnerability register and tracking actions to closure * Triage, categorise and prioritise vulnerabilities based on risk, exposure and business impact * Support patching, configuration hardening and decommissioning activities to reduce risk exposure * Monitor and respond to security alerts and incidents, contributing to investigation and improvement actions * Help improve detection and response capability (more proactive monitoring and response workflows) * Work with external providers (e.g., SOC / security vendors) to reduce high-priority risks * Develop and maintain security playbooks (phishing, ransomware, account compromise, etc.) * Provide security input into projects, changes and supplier reviews so security is built-in from the start * Support audits / assessments (e.g., vulnerability assessments, pen tests, configuration benchmarks, PCI where relevant) * Contribute to awareness initiatives and practical security guidance across the business * Support progress against NIST CSF focus areas and maturity improvements What we're looking for * 3+ years in security operations / cybersecurity engineering (or strong IT ops experience with security ownership) * Strong understanding of vulnerability management processes and risk-based prioritisation * Familiarity with email + endpoint security controls (e.g., Defender-style toolsets, phishing controls, email security) * Awareness of IAM concepts: MFA, conditional access, privileged access/PIM * Comfortable working with technical teams to get remediation delivered (patching cycles, change, infrastructure support) * Clear communicator who can explain risk to both technical and non-technical stakeholders * Bonus points for: SIEM exposure, threat hunting, cloud security, automation/scripting, infrastructure/networking Package * £45-50k salary range * Private medical insurance, life assurance, permanent health insurance * Staff discount, interest-free loan scheme, sports & social club Working pattern * Hybrid: 3 days per week on-site in Hertfordshire, 2 days remote ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)