Senior Cyber Security Engineer

In this role you will act as a trusted security practitioner on a high-impact defence programme, shaping secure designs and assuring controls across infrastructure, platforms, and applications including cloud. You’ll work with a skilled team to raise the security bar, delivering risk-driven guidance to stakeholders and aligning with government standards. The position combines hands-on engineering with governance and assurance to enable mission critical IT operations. You’ll apply security as code and contribute to secure, auditable outcomes.

• Contributory Pension Scheme
• Private Medical Insurance
• 33 days Annual Leave
• Flexible benefits
• Flexi-Time
• Disability adjustments on request

• Lead and contribute to vulnerability management, reporting, and risk prioritisation across endpoints, servers, and cloud
• Design, implement, and assure security controls; support secure landing zones in AWS
• Lead incident response activities and provide senior support for containment, investigation, and lessons learned
• Ensure secure configuration, hardening, patch management, and compliance against CIS/NIST/STIG baselines
• Perform security design reviews, change impact assessments, and ST&V activities
• Engage stakeholders, contribute to governance forums, and provide risk-based decision support
• Create and maintain high-quality security documentation and evidence; mentor others and drive process improvements

• Senior cyber security engineering experience across on-prem and/or cloud environments
• Practical experience implementing security as code and policy as code in AWS (CloudFormation, Terraform, AWS Organisations)
• Strong knowledge of secure configuration, hardening, and benchmarks (CIS, NIST, STIG)
• Hands-on vulnerability management and risk-based remediation leadership
• Experience supporting or leading incident response activities
• Ability to communicate complex security issues to non-specialists and support governance decisions
• Experience producing security documentation and audit-ready evidence
• AWS security-related certifications or equivalent cloud security experience

• Clear communication with non-specialists
• Mentoring and knowledge sharing
• Stakeholder engagement and governance participation
• Vulnerability management
• Endpoint and identity security
• Cloud security (AWS)