Information Technology Security Specialist

An exciting opportunity has arisen for an experienced IT Security Specialist to join a growing, purpose-driven organisation operating within the life sciences and technology sector. The successful candidate will take ownership of the organisation’s security infrastructure, controls and tooling, ensuring a secure, resilient and well-managed cloud environment. You will play a hands-on role in managing and improving security across Microsoft 365, Azure and associated cloud platforms, supported by an external Security Operations Centre (SOC). This is an excellent opportunity for a technically strong security professional who enjoys combining operational security, cloud technologies, automation and continuous improvement.

Role & Responsibilities

• Take operational ownership of security infrastructure and tooling across Microsoft 365, Azure, Entra ID, Intune, Defender, Sentinel and Purview
• Manage vulnerability assessments, remediation and patch management using Qualys VMDR and associated tooling
• Work closely with the external SOC to investigate security alerts, manage incidents and implement remediation activities
• Configure and maintain identity and access management (IAM), RBAC, Conditional Access and endpoint security controls
• Develop automation and Infrastructure as Code (IaC) capabilities to improve security, consistency and operational efficiency
• Support the development and maintenance of security policies, procedures and compliance frameworks
• Contribute to ISO 27001, Cyber Essentials Plus and wider information security accreditation activities
• Identify security improvements, address vulnerabilities and support cloud and infrastructure transformation projects

• Proven experience in a hands-on IT Security, Cloud Security or Senior Infrastructure Security role
• Strong technical knowledge of Microsoft 365, Azure, Entra ID, Intune, Defender and Sentinel
• Experience managing vulnerability scanning, patch management and security controls, ideally using Qualys
• Good understanding of IAM, RBAC, Conditional Access and Microsoft cloud security best practices
• Experience with PowerShell, scripting, automation or Infrastructure as Code
• Previous experience working with a SOC, responding to security incidents and managing remediation activities
• Understanding of security frameworks including ISO 27001, Cyber Essentials Plus and NIST
• Relevant Microsoft or security certifications such as AZ-500, Security+, CISSP or CISM would be advantageous
• Salesforce security experience would be beneficial but is not essential