> Markdown version of [/jobs/ext/3251437-it-security-engineer](https://www.wearedevelopers.com/jobs/ext/3251437-it-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Engineer

- **Company:** MCS Group
- **Location:** Belfast, UK
- **Salary:** £50,000.0 - £60,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Oracle WebLogic Server, Cyber Security, Linux, Identity and Access Management, Python (Programming Language), Linux System Administration, Oracle Databases, Windows PowerShell, Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, Data Management, Oracle Cloud Infrastructure, Vulnerability Analysis
- **Published:** September 30, 2026
- **Apply:** https://www.nijobfinder.co.uk/job/2054258/it-security-engineer/

## About the Role

You'll have a background in security engineering, infrastructure security or a blended infrastructure/security position, with practical experience of vulnerability management and remediation.

Ideally, you'll bring experience across areas such as:

 * Vulnerability scanning, prioritisation, remediation and reporting
 * EDR, MDR, SIEM or threat-detection platforms
 * Windows and Linux environments
 * Networking and infrastructure security
 * AWS, OCI, Azure or another major public-cloud platform
 * Identity and access management, PAM and MFA
 * Security hardening and operational security controls
 * ISO 27001, Cyber Essentials or similar security frameworks

Experience with CrowdStrike, PowerShell/Python, Oracle Database or WebLogic would be useful but isn't essential. The focus is on strong underlying security fundamentals rather than experience with every technology in the environment.

## Description

You'll take ownership of the vulnerability management process across servers, databases and cloud workloads, working closely with Infrastructure Engineers and technical stakeholders to ensure vulnerabilities are properly prioritised and remediated.

You'll also act as a key point of contact for security tooling and operational security, helping to strengthen controls and improve the organisation's overall security posture.

Key responsibilities will include:

 * Owning and coordinating vulnerability management and remediation activity
 * Prioritising vulnerabilities based on technical severity and wider business risk
 * Tracking remediation against agreed timelines and escalating risks or blockers
 * Administering and improving EDR, SIEM and security monitoring capabilities
 * Reviewing security alerts and coordinating appropriate response activity
 * Supporting security hardening across Windows, Linux, networking and cloud environments
 * Contributing to the secure adoption and ongoing operation of AWS and OCI
 * Supporting PAM, MFA, privileged access and wider identity security controls
 * Contributing to ISO 27001, security risk management and audit activity
 * Supporting the secure and governed adoption of AI tooling, including appropriate controls, policies and data-handling practices
 * Maintaining security documentation, processes and incident response procedures
 * Working closely with Infrastructure Engineers to embed security into BAU and project delivery


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)