Information Security Engineer

• Assess the security configurations of Azure IaaS and Google Cloud environments, including infrastructure.
• Provide recommendations based on industry best practices and emerging security threats.
• Provide Cyber Incident Responders with subject matter expertise in cloud security when required.
• Evaluate and optimise the use of Azure Defender and other security monitoring tools in Azure and Google Cloud.
• Offer guidance on improving threat detection, monitoring, and response for cloud-based resources.
• Assess and improve Conditional Access policies and identity management strategies, enforcing zero trust and least privilege principles.
• Provide expert advice on configuring and managing identity and access management (IAM) solutions for secure cloud environments.
• Ensure cloud environments meet regulatory and internal governance requirements.
• Conduct periodic security audits and risk assessments, offering actionable recommendations.
• Perform day-to-day maintenance of various security tools including SIEM and vulnerability scanning toolsets.
• Manage upgrades, configuration changes, and feature enhancements.
• Support all types of cyber incident response as part of the wider cyber response function.
• Use tooling such as SIEM, EDR, and IdP.

Technologies:

• Azure
• Cloud
• IAM
• IaaS
• Support
• Linux
• macOS
• Network
• Security
• Terraform
• Windows
• GCP, We are part of the Information Security Group (ISG), formed in 2014 to deliver operational and strategic information and cyber security, as well as business continuity. We operate independently of IT, with oversight from the Information Security Committee and Conduct and Risk Committee, and our Chief Global Information Security Officer reports into the General Counsel and Global Risk Partner. Our team is based mainly in our London and Manchester offices. We are an equal opportunities employer and consider all applications on merit. We welcome suitably qualified applicants from all backgrounds. Employment offers are conditional on the candidate having or securing the right to work in the UK and providing evidence before employment starts. We are also a Ban the Box employer and ask applicants to disclose criminal convictions only if and when a conditional job offer is made, with decisions considered case by case. Location: London; Manchester.

• Experience in an IT engineering capacity.
• Hands-on experience administering Azure security environments.
• Strong experience managing compute, network, and storage resources across cloud and hybrid environments.
• Extensive knowledge of Azure services, Microsoft Defender, Conditional Access, and Google Cloud security tools.
• Strong understanding of SIEM platforms, vulnerability management tools, and supporting infrastructure.
• Broad knowledge of core IT domains, including infrastructure, software development, databases, cloud platforms, and identity and access management (IAM).
• Strong engineering background with expertise in Windows Server, endpoint platforms, macOS, and Linux.
• Strong knowledge of information security frameworks, including NIST and relevant NIST 800-series publications.
• Hands-on experience with SIEM technologies, including data ingestion, monitoring, alerting, and integration with security operations processes.
• Proficiency in Terraform and infrastructure-as-code (IaC) best practices.
• Excellent written and verbal communication skills, with the ability to explain technical concepts to both technical and non-technical audiences.
• Relevant cloud and security certifications, such as Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or other equivalent cloud security certifications.