IT Security Engineer
AQUILA
About Aquila ATMS
At Aquila Air Traffic Management Services (ATMS), we are dedicated to creating a workplace where innovation, collaboration, and excellence thrives. As a joint venture between NATS and Thales, we combine the expertise of leading air traffic control services and global systems integration to deliver cutting-edge solutions in air traffic management. Join us in shaping the future of air traffic management, and together, we will elevate aviation safety and efficiency worldwide! The Role
We are looking for an
IT Security Engineer
to join our IT and Data team. Reporting to the Head of IT and Data, you will help secure Aquila's Microsoft 365, Azure and wider IT environment. You will maintain and improve security tooling, strengthen detection and response capability, manage vulnerabilities, support secure configuration, and provide practical, risk-based security advice to the business. Your core responsibilities will include: Improve Aquila's security incident response capability, investigating, containing and resolving incidents while embedding lessons learned and preventative actions.
Configure, monitor and continually improve Microsoft Defender, firewall and SIEM capabilities, including alert triage, detection rules, incident workbooks and response playbooks.
Manage vulnerability and threat activity through risk-based assessment, remediation tracking, security testing and clear reporting of technical risks.
Support Cyber Essentials and Cyber Essentials Plus readiness, assess new cloud capabilities, and work with colleagues and suppliers to strengthen Aquila's cyber resilience.
This is a hands on role where you’ll contribute to meaningful work and play a part in helping the organisation achieve its objectives. About You
You're an
IT security
professional who contributes positively to your team and the wider organisation. You work collaboratively, adapt to different situations, and bring sound judgement to your work. You communicate clearly, build effective working relationships, and approach challenges with a practical, solutions-focused mindset. To be successful in this role, you’ll bring: Relevant experience as an
IT Security Engineer or in a similar cyber security or security operations role
.
Knowledge of
Microsoft Defender, Azure security, Entra ID, networking, vulnerability management and incident response
.
Experience in
configuring and managing security infrastructure across Microsoft cloud and on-premises environments
.
The ability to
analyse technical risk, respond calmly to incidents, communicate findings clearly and collaborate across teams
.
You also: Promote
Aquila’s Just Culture
, reporting incidents, safety non compliance, or potential issues in an appropriate and timely manner.
Consistently demonstrate behaviours aligned with
Aquila’s core values
and
leadership behaviours
in all actions and decisions.
What We're Looking For
Essential Criteria
CompTIA Security+ and Network+, or equivalent demonstrable practical experience.
Hands-on experience administering Microsoft Defender and Azure security, including Entra ID, Conditional Access, MFA, privileged access and role-based access control.
Practical experience with firewalls, IDS/IPS, EDR, vulnerability management, network security and incident response across cloud and on-premises environments.
A strong understanding of TCP/IP, DNS, Windows and Linux environments, with the ability to translate technical risks into proportionate security controls.
Desirable Criteria
A relevant advanced security certification, such as CompTIA CySA+, CEH, CISSP, CISM, CCSP or OSCP.
Experience with PowerShell, Bash or another scripting language, and working knowledge of ISO 27001 or UK GDPR requirements.
If you don’t meet every requirement but feel you have relevant experience, we’d still like to hear from you.
We support flexible working arrangements and welcome applications from candidates seeking hybrid roles. This role requires occasional out of hours due to the nature of the role. Benefits
Core Benefits
201 hours (approx. 27 days) annual leave + 1 Company Day to be used at Christmas (Excluding Bank Holidays) - Prorated for part time contracts
Time off to volunteer (up to 3 days per annum)
Company Pension Plan (Aquila contribution = employee contribution + 1%, up to 7%)
Life Assurance (2x basic salary or up to 8x if in the pension scheme)
Income Protection
Employee Assistance Programme with 24/7 support and counselling
Company paid Private Medical Insurance (Couple cover)
Variable Compensation Plan (discretionary bonus)
Flexible Benefits
Through Aquila’s flexible benefits platform, you can tailor your package, including: Healthcare Cash Plan options
Additional PMI cover
Buy or sell annual leave
Cycle to Work scheme
Discounts at high street retailers
Family, Wellbeing & Lifestyle
Enhanced Maternity pay
Enhanced Paternity leave & pay
Enhanced Occupational Sick pay
Mental Health First Aiders
Recognition through Altair Award
Employee referral bonus
Security Clearance Statement
Due to the nature of the work that we do, many of our roles are subject to security restrictions. This role requires you to be a UK National and achieve Security Clearance (SC) without any caveats. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment. If approved by the MOD, a dual national from a Non-ITAR country may be considered. Please visit the UKSV website for further guidance- United Kingdom Security Vetting – GOV.UK ( Equal Opportunities, Diversity, Equity and Inclusion
Aquila ATMS is an equal opportunities employer committed to creating a diverse and inclusive workplace. Applications are welcomed from suitably qualified candidates from all backgrounds. Employment decisions are made fairly and without discrimination on the basis of age, disability, sex, sexual orientation, gender reassignment, pregnancy and maternity, race, religion or belief, marriage or civil partnership, or any other characteristic protected by law.
At Aquila Air Traffic Management Services (ATMS), we are dedicated to creating a workplace where innovation, collaboration, and excellence thrives. As a joint venture between NATS and Thales, we combine the expertise of leading air traffic control services and global systems integration to deliver cutting-edge solutions in air traffic management. Join us in shaping the future of air traffic management, and together, we will elevate aviation safety and efficiency worldwide! The Role
We are looking for an
IT Security Engineer
to join our IT and Data team. Reporting to the Head of IT and Data, you will help secure Aquila's Microsoft 365, Azure and wider IT environment. You will maintain and improve security tooling, strengthen detection and response capability, manage vulnerabilities, support secure configuration, and provide practical, risk-based security advice to the business. Your core responsibilities will include: Improve Aquila's security incident response capability, investigating, containing and resolving incidents while embedding lessons learned and preventative actions.
Configure, monitor and continually improve Microsoft Defender, firewall and SIEM capabilities, including alert triage, detection rules, incident workbooks and response playbooks.
Manage vulnerability and threat activity through risk-based assessment, remediation tracking, security testing and clear reporting of technical risks.
Support Cyber Essentials and Cyber Essentials Plus readiness, assess new cloud capabilities, and work with colleagues and suppliers to strengthen Aquila's cyber resilience.
This is a hands on role where you’ll contribute to meaningful work and play a part in helping the organisation achieve its objectives. About You
You're an
IT security
professional who contributes positively to your team and the wider organisation. You work collaboratively, adapt to different situations, and bring sound judgement to your work. You communicate clearly, build effective working relationships, and approach challenges with a practical, solutions-focused mindset. To be successful in this role, you’ll bring: Relevant experience as an
IT Security Engineer or in a similar cyber security or security operations role
.
Knowledge of
Microsoft Defender, Azure security, Entra ID, networking, vulnerability management and incident response
.
Experience in
configuring and managing security infrastructure across Microsoft cloud and on-premises environments
.
The ability to
analyse technical risk, respond calmly to incidents, communicate findings clearly and collaborate across teams
.
You also: Promote
Aquila’s Just Culture
, reporting incidents, safety non compliance, or potential issues in an appropriate and timely manner.
Consistently demonstrate behaviours aligned with
Aquila’s core values
and
leadership behaviours
in all actions and decisions.
What We're Looking For
Essential Criteria
CompTIA Security+ and Network+, or equivalent demonstrable practical experience.
Hands-on experience administering Microsoft Defender and Azure security, including Entra ID, Conditional Access, MFA, privileged access and role-based access control.
Practical experience with firewalls, IDS/IPS, EDR, vulnerability management, network security and incident response across cloud and on-premises environments.
A strong understanding of TCP/IP, DNS, Windows and Linux environments, with the ability to translate technical risks into proportionate security controls.
Desirable Criteria
A relevant advanced security certification, such as CompTIA CySA+, CEH, CISSP, CISM, CCSP or OSCP.
Experience with PowerShell, Bash or another scripting language, and working knowledge of ISO 27001 or UK GDPR requirements.
If you don’t meet every requirement but feel you have relevant experience, we’d still like to hear from you.
We support flexible working arrangements and welcome applications from candidates seeking hybrid roles. This role requires occasional out of hours due to the nature of the role. Benefits
Core Benefits
201 hours (approx. 27 days) annual leave + 1 Company Day to be used at Christmas (Excluding Bank Holidays) - Prorated for part time contracts
Time off to volunteer (up to 3 days per annum)
Company Pension Plan (Aquila contribution = employee contribution + 1%, up to 7%)
Life Assurance (2x basic salary or up to 8x if in the pension scheme)
Income Protection
Employee Assistance Programme with 24/7 support and counselling
Company paid Private Medical Insurance (Couple cover)
Variable Compensation Plan (discretionary bonus)
Flexible Benefits
Through Aquila’s flexible benefits platform, you can tailor your package, including: Healthcare Cash Plan options
Additional PMI cover
Buy or sell annual leave
Cycle to Work scheme
Discounts at high street retailers
Family, Wellbeing & Lifestyle
Enhanced Maternity pay
Enhanced Paternity leave & pay
Enhanced Occupational Sick pay
Mental Health First Aiders
Recognition through Altair Award
Employee referral bonus
Security Clearance Statement
Due to the nature of the work that we do, many of our roles are subject to security restrictions. This role requires you to be a UK National and achieve Security Clearance (SC) without any caveats. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment. If approved by the MOD, a dual national from a Non-ITAR country may be considered. Please visit the UKSV website for further guidance- United Kingdom Security Vetting – GOV.UK ( Equal Opportunities, Diversity, Equity and Inclusion
Aquila ATMS is an equal opportunities employer committed to creating a diverse and inclusive workplace. Applications are welcomed from suitably qualified candidates from all backgrounds. Employment decisions are made fairly and without discrimination on the basis of age, disability, sex, sexual orientation, gender reassignment, pregnancy and maternity, race, religion or belief, marriage or civil partnership, or any other characteristic protected by law.
Reference: WJCPA-5429_440569 · Posted 13 Nov 2026, 01:19 AM