IT Security Engineer

About Aquila ATMS

At Aquila Air Traffic Management Services (ATMS), we are dedicated to creating a workplace where innovation, collaboration, and excellence thrives. As a joint venture between NATS and Thales, we combine the expertise of leading air traffic control services and global systems integration to deliver cutting-edge solutions in air traffic management.

Join us in shaping the future of air traffic management, and together, we will elevate aviation safety and efficiency worldwide!

The Role

We are looking for an IT Security Engineer to join our IT and Data team.

Reporting to the Head of IT and Data, you will help secure Aquila's Microsoft 365, Azure and wider IT environment. You will maintain and improve security tooling, strengthen detection and response capability, manage vulnerabilities, support secure configuration, and provide practical, risk-based security advice to the business.

Your core responsibilities will include:

• Improve Aquila's security incident response capability, investigating, containing and resolving incidents while embedding lessons learned and preventative actions.

• Configure, monitor and continually improve Microsoft Defender, firewall and SIEM capabilities, including alert triage, detection rules, incident workbooks and response playbooks.

• Manage vulnerability and threat activity through risk-based assessment, remediation tracking, security testing and clear reporting of technical risks.

• Support Cyber Essentials and Cyber Essentials Plus readiness, assess new cloud capabilities, and work with colleagues and suppliers to strengthen Aquila's cyber resilience.

This is a hands on role where you’ll contribute to meaningful work and play a part in helping the organisation achieve its objectives.

About You

You're an IT security professional who contributes positively to your team and the wider organisation. You work collaboratively, adapt to different situations, and bring sound judgement to your work. You communicate clearly, build effective working relationships, and approach challenges with a practical, solutions-focused mindset.

To be successful in this role, you’ll bring:

• Relevant experience as an IT Security Engineer or in a similar cyber security or security operations role .

• Knowledge of Microsoft Defender, Azure security, Entra ID, networking, vulnerability management and incident response .

• Experience in configuring and managing security infrastructure across Microsoft cloud and on-premises environments .

• The ability to analyse technical risk, respond calmly to incidents, communicate findings clearly and collaborate across teams .

You also:

• Promote Aquila’s Just Culture , reporting incidents, safety non compliance, or potential issues in an appropriate and timely manner.

• Consistently demonstrate behaviours aligned with Aquila’s core values and leadership behaviours in all actions and decisions.

What We're Looking For

Essential Criteria

• CompTIA Security+ and Network+, or equivalent demonstrable practical experience.

• Hands-on experience administering Microsoft Defender and Azure security, including Entra ID, Conditional Access, MFA, privileged access and role-based access control.

• Practical experience with firewalls, IDS/IPS, EDR, vulnerability management, network security and incident response across cloud and on-premises environments.

• A strong understanding of TCP/IP, DNS, Windows and Linux environments, with the ability to translate technical risks into proportionate security controls.

Desirable Criteria

• A relevant advanced security certification, such as CompTIA CySA+, CEH, CISSP, CISM, CCSP or OSCP.

• Experience with PowerShell, Bash or another scripting language, and working knowledge of ISO 27001 or UK GDPR requirements.

If you don’t meet every requirement but feel you have relevant experience, we’d still like to hear from you. We support flexible working arrangements and welcome applications from candidates seeking hybrid roles. This role requires occasional out of hours due to the nature of the role.

Benefits

Core Benefits

• 201 hours (approx. 27 days) annual leave + 1 Company Day to be used at Christmas (Excluding Bank Holidays) - Prorated for part time contracts

• Time off to volunteer (up to 3 days per annum)

• Company Pension Plan (Aquila contribution = employee contribution + 1%, up to 7%)

• Life Assurance (2x basic salary or up to 8x if in the pension scheme)

• Income Protection

• Employee Assistance Programme with 24/7 support and counselling

• Company paid Private Medical Insurance (Couple cover)

• Variable Compensation Plan (discretionary bonus)

Flexible Benefits

Through Aquila’s flexible benefits platform, you can tailor your package, including:

• Healthcare Cash Plan options

• Additional PMI cover

• Buy or sell annual leave

• Cycle to Work scheme

• Discounts at high street retailers

Family, Wellbeing & Lifestyle

• Enhanced Maternity pay

• Enhanced Paternity leave & pay

• Enhanced Occupational Sick pay

• Mental Health First Aiders

• Recognition through Altair Award

• Employee referral bonus

Security Clearance Statement

Due to the nature of the work that we do, many of our roles are subject to security restrictions. This role requires you to be a UK National and achieve Security Clearance (SC) without any caveats. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment. If approved by the MOD, a dual national from a Non-ITAR country may be considered. Please visit the UKSV website for further guidance- United Kingdom Security Vetting – GOV.UK (

Equal Opportunities, Diversity, Equity and Inclusion

Aquila ATMS is an equal opportunities employer committed to creating a diverse and inclusive workplace. Applications are welcomed from suitably qualified candidates from all backgrounds. Employment decisions are made fairly and without discrimination on the basis of age, disability, sex, sexual orientation, gender reassignment, pregnancy and maternity, race, religion or belief, marriage or civil partnership, or any other characteristic protected by law.