Security Engineer

About the role

We are seeking a hands‑on Security Engineer to lead and improve our internal security operations. As the first dedicated security hire, you will own the design, automation and monitoring of controls that protect our cloud‑first infrastructure and ensure ISO 27001 and UK Cyber Essentials compliance.

Key responsibilities

• Develop, tune and maintain SIEM detection rules and alerting workflows.
• Identify detection gaps and implement pragmatic improvements.
• Enhance DLP and secure web‑gateway controls and monitor CASB/ISPM findings.
• Investigate security alerts, perform root‑cause analysis and manage incident response.
• Support vulnerability management across cloud, endpoints and SaaS platforms.
• Provide security input for new SaaS integrations and cloud architecture changes.
• Automate repetitive security tasks, reporting and reduce false‑positive alerts.
• Maintain and evolve incident‑response playbooks, tabletop exercises and post‑incident reviews.

Required profile

• Practical experience in security engineering within cloud environments.
• Strong understanding of risk‑based security, compliance frameworks (ISO 27001, UK Cyber Essentials) and automation.
• Ability to work independently, prioritize work that reduces business risk and influence security processes.
• Excellent analytical and problem‑solving skills.

Required skills

• Okta
• Google Cloud Platform
• Datadog
• Jamf
• Vanta
• SIEM (rule creation and tuning)
• DLP and secure web‑gateway technologies
• CASB and ISPM platforms
• Vulnerability management tools
• Scripting/automation (e.g., Python, Bash)