> Markdown version of [/jobs/ext/4159168-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/4159168-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Engineer

- **Company:** ITSS Recruitment
- **Location:** London, UK
- **Salary:** £60,000.0 - £70,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, CompTIA Security+, Cyber Security, Multi-Factor Authentication, Identity and Access Management, Microsoft Security Essentials, Software Vulnerability Management, Microsoft Sentinel, Network Server
- **Published:** October 31, 2026
- **Apply:** https://www.itssrecruitment.co.uk/job-search/3029-information-security-engineer/it-support/greater-london/apply

## About the Role

* Proven experience within an Information Security Engineer, InfoSec, Information Security Analyst, Security Analyst or Cyber Security role.
 * Strong technical understanding of cyber security principles, technologies and controls.
 * Hands-on experience operating vulnerability management and remediation processes.
 * Experience securing cloud, endpoint and network environments.
 * Good understanding of identity and access management (IAM), privileged access controls and multi-factor authentication (MFA).
 * Experience working within a regulated or compliance-driven environment.
 * Experience with Microsoft security technologies, including Microsoft Defender, Purview, Entra ID, Sentinel and Azure security services.
 * Ability to assess security risks and translate findings into practical recommendations for stakeholders.

Desirable Experience

 * Security certifications such as AZ-500, SC-200, Security+, CISSP, CISM or CEH.
 * Experience supporting security governance, risk and compliance activities.
 * Exposure to security monitoring, threat detection and incident response processes.
 * Experience within healthcare, financial services or other highly regulated environments.

## Description

Central London (Marylebone) | Hybrid (2 Days Office) | Up to £70,000 + Excellent Benefits
Private Healthcare | Enhanced Pension | 25 Days Holiday + Bank Holidays | 37.5 Hour Working Week

We're recruiting an Information Security Engineer to join a globally recognised healthcare organisation, helping to protect critical systems, sensitive data and essential business operations.
This is an excellent opportunity to work across a broad security estate covering cloud security, vulnerability management, incident response, security monitoring and security engineering. You'll work closely with infrastructure, applications and business stakeholders to ensure security remains at the forefront of both operational activity and strategic technology initiatives., * Operate and develop the organisation's vulnerability management programme, including scanning, prioritisation, remediation tracking and reporting.

 * Monitor security tools and alerts, supporting the detection, investigation and response to security incidents.
 * Conduct technical investigations, root cause analysis and post-incident reviews.
 * Implement, configure and maintain security controls across networks, servers, endpoints, cloud platforms and business-critical systems.
 * Administer and optimise Microsoft security technologies, including Microsoft Defender, Microsoft Purview, Entra ID, Microsoft Sentinel and Azure security services.
Support and enhance endpoint protection, identity security, MFA, email security and log management solutions.

 * Work with infrastructure and application teams to ensure systems are securely configured, hardened and maintained.
 * Ensure systems and services align with relevant regulatory, compliance and security requirements.
 * Maintain security documentation, policies, procedures, standards and audit evidence.
 * Provide security input into projects, infrastructure changes and technology deployments.
 * Review technical designs and deliver pragmatic, risk-based security recommendations.
Act as a key technical security contact for suppliers, partners and third-party service providers.

 * Communicate security risks, issues and remediation plans to both technical and non-technical stakeholders.