> Markdown version of [/jobs/ext/4156546-security-engineer](https://www.wearedevelopers.com/jobs/ext/4156546-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** First Intuition - **Location:** London, UK (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Cloud Computing Security, CompTIA Security+, Cyber Security, Data Cleansing, Linux, Information Technology Operations, Python (Programming Language), Network Security, Microsoft Office, Windows PowerShell, Cloud Services, Zero Trust Network Access, Service Pack, Security Information and Event Management, Software Vulnerability Management, EndPointSecurity, Scripting, Cyber Threat Analysis, Firewalls (Computer Science), Microsoft InTune, Qualys, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** October 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=fe42c99d3eeecc43 ## About the Role * Two to three years' experience in cyber security, security engineering, infrastructure engineering, IT operations or a related technical role. * Hands-on experience with vulnerability scanning, assessment and remediation using Qualys or a comparable enterprise platform. * Demonstrable ability to analyse, validate and prioritise vulnerabilities using technical and business risk factors. * Practical experience driving remediation across Windows, Linux, endpoints, networks, cloud services or applications. * Scripting capability for security automation. Either Python or PowerShell is strongly preferred, particularly for automating vulnerability identification, triage, remediation and validation procedures. * An understanding of CVEs, CVSS, known exploited vulnerabilities, threat intelligence, attack paths, security hardening and compensating controls. * An understanding of security operations, including security monitoring, alert investigation and incident response processes. * A practical understanding of Zero Trust security principles. * The ability to manage multiple remediation activities and maintain momentum from identification through to verified closure. * Strong written and verbal communication skills, with the ability to explain technical risks and remediation requirements to technical and non-technical stakeholders. * Right to live and work in the UK and ability to travel, when required, to centres. Desirable * Experience with Microsoft 365 E5/A5 security technologies, including Defender for Endpoint Plan 2 and Defender for Office 365 Plan 2. * Experience with vulnerability assessment and management tools, preferably Qualys. * Experience with firewall and network-security auditing tools, preferably Nipper Studio. * Experience supporting security operations, SIEM, threat intelligence or incident investigations. * Experience with Microsoft Intune, Entra ID, Azure or AWS security. * Relevant certifications, such as Microsoft SC-900 or CompTIA Security+. ## Description Our success is due to our approach to training and our links with businesses. We work closely with organisations to precisely understand their needs and incorporate these into innovative course designs, where the interaction with students is tailored, personal and reflects their specific circumstances. This approach has led to First Intuition being awarded an 'Outstanding' rating by Ofsted. We are seeking a hands-on Security Engineer with a strong vulnerability management focus to help reduce organisational cyber risk through effective vulnerability management, security automation and continuous improvement of security controls. This is an excellent opportunity to join a growing security function and play a key role in protecting our rapidly expanding organisation. You will manage the technical vulnerability lifecycle from identification and validation through risk-based prioritisation, remediation and verification. You will also support security operations by improving the tooling, integrations and automated processes used by the SOC to identify and respond to security threats. This role suits an engineer who enjoys turning security findings into measurable risk reduction, automating repeatable security processes and working across Security, Infrastructure, IT Operations and application teams. What You'll Do * Operate and continuously improve the end-to-end vulnerability management lifecycle across endpoints, servers, networks, cloud services and applications. * Run and review authenticated vulnerability assessments using Qualys, validate findings and reduce false positives. * Prioritise vulnerabilities using exploitability, threat intelligence, internet exposure, asset criticality, business impact and technical severity rather than relying on CVSS alone. * Translate findings into clear remediation plans with defined owners, target dates and verification criteria. * Work with system and application owners to remediate vulnerabilities through patching, configuration changes, hardening, upgrades or compensating controls. * Develop security automation, preferably using Python, to improve vulnerability triage, remediation workflows, data enrichment and fix validation. * Test, coordinate and validate security patches and configuration changes while balancing security risk and operational impact. * Support the SOC from an engineering perspective by improving security tooling, integrations, alert enrichment and automated response processes. * Assist with security investigations where vulnerabilities, insecure configurations or missing patches may have contributed to an event. * Use threat intelligence to provide context for vulnerability prioritisation, security alerts and emerging threats. * Apply Zero Trust principles when implementing or improving endpoint, identity, network and cloud security controls. * Review network-device configurations and firewall rule sets using Nipper Studio or comparable security auditing tools. * Track vulnerabilities, exceptions and remediation progress through to verified closure. * Produce security metrics and dashboards covering exposure, vulnerability ageing, remediation performance and residual risk. * Maintain technical documentation, remediation playbooks and security automation code. * Carry out tasks as delegated by the Information Systems Security Manager from time to time., * Vulnerabilities are accurately identified, risk-ranked, assigned and remediated within agreed service levels. * Critical and actively exploited vulnerabilities receive rapid, intelligence-led attention. * Remediation is technically verified and recurring vulnerabilities are reduced. * Python automation shortens vulnerability triage and remediation cycles and reduces repetitive manual work. * The SOC benefits from reliable security tooling, useful integrations and improved automation. * Reporting provides a clear view of material exposure, remediation performance and residual risk. * Security, Infrastructure, IT Operations and application teams share accountability for reducing security risk.