> Markdown version of [/jobs/ext/4594629-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/4594629-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer - **Company:** Simpson Judge Ltd - **Location:** London, United Kingdom (Remote available) - **Salary:** £57,000 - £67,000 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Antivirus, Microsoft Azure, CompTIA Security+, Cyber Security, Information Leak Prevention, Data Security, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Microsoft Security Essentials, Azure Active Directory, Cloud Services, Software Vulnerability Management, Data Logging, Cloud Platform System, Mitre Att&ck, Network Server, Vulnerability Analysis - **Published:** November 6, 2026 - **Apply:** https://jobs.co.uk/jobseeker-register?JobGuid=9ebb373e-72b6-4d6e-9371-82da5c3ba09f ## About the Role About You You'll be a technically capable security professional who enjoys getting hands-on, solving problems and taking ownership of security improvements. You'll be comfortable working independently while collaborating with wider IT and security teams. You'll ideally bring: * Previous experience in a dedicated information security, cybersecurity or security engineering role. * Strong practical knowledge of technical security controls across endpoints, networks, servers and cloud environments. * Experience managing vulnerabilities, interpreting scan results, prioritising risks and coordinating remediation. * Experience with security monitoring, alert investigation and incident response. * Knowledge of Microsoft security technologies, ideally including Microsoft Defender, Microsoft 365, Microsoft Entra and identity security controls. * An understanding of MFA, endpoint protection, email security, system hardening and security logging. * Experience working within a regulated environment, with an understanding of data protection and information security compliance. * The ability to assess technical risks and translate them into clear, proportionate recommendations. * Strong communication skills, a proactive approach and the confidence to work with stakeholders across different levels of the organisation., * Microsoft Azure Security Engineer Associate (AZ-500). * Microsoft Security Operations Analyst (SC-200). * CISSP, CISM, CompTIA Security+ or CEH. * Familiarity with Cyber Essentials Plus, MITRE ATT&CK and indicators of compromise (IoCs). * Experience with vulnerability scanning tools, security operations centres (SOCs) and data loss prevention technologies. ## Description This permanent Information Security Engineer post sits with ed Resourcing Ltd in London, paying £57,000-£67,000 annually on a hybrid pattern of up to two home-working days weekly. The successful candidate takes ownership of security across a globally recognised healthcare group, strengthening defences within a highly regulated setting. Duties include driving improvements, protecting systems, services and sensitive records, plus hands-on engineering of controls. Applicants should demonstrate practical expertise in threat detection, risk assessment, network hardening and compliance frameworks. Suited to an experienced professional ready to shape a growing security function and deliver measurable impact., About the Opportunity Are you a hands-on Information Security Engineer looking for an opportunity to take ownership of security, drive improvements and make a meaningful impact in a highly regulated environment?, As part of a globally recognised healthcare group, the organisation is strengthening its security function and looking for an Information Security Engineer to play a key role in protecting its systems, data and services. This is an exciting opportunity for an experienced security professional to take on greater responsibility, work closely with a wider group cybersecurity team and help shape the development of security practices. You'll combine hands-on technical delivery with security monitoring, vulnerability management, risk assessment and continuous improvement, working collaboratively with infrastructure, applications and wider technology teams. The Role As Information Security Engineer, you'll be responsible for implementing, maintaining and improving technical security controls across the organisation. You'll help identify and address vulnerabilities, investigate potential security incidents and ensure systems are configured securely. Working closely with both local IT colleagues and the wider group security function, you'll have the opportunity to identify gaps, recommend improvements and take ownership of initiatives that strengthen the organisation's security posture. Key Responsibilities * Manage vulnerability scanning, prioritisation, remediation tracking and reporting, ensuring security weaknesses are addressed effectively. * Monitor security tools and alerts, supporting the detection, investigation and response to potential security incidents. * Conduct technical investigations, root cause analysis and post-incident reviews, recommending improvements to prevent recurrence. * Implement and maintain security controls across endpoints, networks, servers, cloud services and clinical systems. * Support endpoint protection, email security, identity and access management, multi-factor authentication (MFA) and security logging. * Work with infrastructure and applications teams to improve system hardening, secure configurations and overall security resilience. * Review technical designs, projects and infrastructure changes, identifying security risks and providing practical recommendations. * Support compliance with relevant data protection legislation, security standards and regulatory requirements, including GDPR and NHS Data Security and Protection Toolkit principles where applicable. * Maintain security documentation, procedures, technical standards and audit evidence. * Engage with third-party suppliers, managed security providers and group cybersecurity colleagues to resolve issues and drive improvements. * Communicate security risks, remediation plans and technical recommendations clearly to both technical teams and senior stakeholders.