Cyber Security Engineer

· You will design, implement, and maintain enterprise security solutions across cloud, infrastructure, application, and endpoint environments.

· You will develop and maintain security standards, technical controls, and security architectures.

· You will evaluate emerging technologies and recommend improvements to strengthen our security posture.

· You will support the implementation of Zero Trust security principles across the organisation.

· You will enhance threat prevention, detection, and response capabilities through security engineering best practices.

· You will design and implement security controls within Microsoft Azure and hybrid cloud environments.

· You will secure cloud infrastructure using industry best practices and cloud-native security technologies.

· You will implement identity and privileged access management controls.

· You will monitor and remediate cloud security risks and misconfigurations.

· You will participate in cloud security reviews, assessments, and architecture discussions.

· You will engineer and maintain SIEM, SOAR, and security monitoring platforms.

· You will develop and optimise security alerts, detections, and automated response processes.

· You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities.

· You will support security investigations, incident response activities, and root cause analysis.

· You will deliver security automation initiatives that improve operational effectiveness.

· You will implement and maintain vulnerability management processes.

· You will conduct infrastructure, application, and cloud security assessments.

· You will work with technical teams to coordinate remediation activities.

· You will review penetration testing findings and support remediation planning.

· You will perform security reviews and risk assessments for new technologies and services.

· You will design and implement secure network architectures.

· You will manage and improve security controls including:

Ø Firewalls

Ø Web Application Firewalls (WAF)

Ø Secure Web Gateways

Ø Network Segmentation

Ø DDoS Protection

Ø API Security Controls

· You will support endpoint security and Mobile Device Management (MDM) solutions.

· You will develop scripts, automation, and orchestration workflows.

· You will automate repetitive security tasks to improve efficiency.

· You will enhance compliance monitoring, reporting, visibility, and alerting capabilities.

· You will support Infrastructure-as-Code (IaC) security reviews and governance.

Proven experience as a Cyber Security Engineer, Security Engineer, Cloud Security Engineer, Infrastructure Security Engineer, or similar role.

Strong understanding of modern cyber security principles and security architecture.

Hands-on experience with:

· SIEM and Security Monitoring platforms

· Endpoint Detection and Response (EDR)

· Vulnerability Management solutions

· Identity and Access Management (IAM)

· Network Security technologies

· Web Application Firewalls (WAF)

· Security Automation tools

· Cloud Security Controls

Strong experience securing Microsoft Azure environments.

Experience working within cloud and hybrid infrastructure environments.

Knowledge of application security and secure software development practices.

Experience supporting DevSecOps initiatives.

Scripting and automation experience using technologies such as:

· PowerShell

· Python

· Bash

· Terraform

Excellent troubleshooting, analytical, and problem-solving skills.

Strong communication and stakeholder engagement abilities.

A recognised cyber security qualification such as:

· CompTIA Security+ (SY0-701)

· ISC2 Certified in Cybersecurity (CC)

· ISC2 SSCP

· Microsoft Security Operations Analyst (SC-200)

· Microsoft Azure Security Engineer Associate (AZ-500)

· GIAC Security Essentials (GSEC)

· Microsoft Cybersecurity Architect Expert (SC-100)

· CISSP

· CISM

· Certified Cloud Security Professional (CCSP)

· Certified Ethical Hacker (CEH)

· Offensive Security Certified Professional (OSCP)

· Terraform Associate Certification

· Additional GIAC certifications

We are one of the UK’s leading omni channel retailers, but as well as that, we’re a genuinely great place to work. We value you and your development. Our people across the business have taken on new opportunities, whether that’s stepping into a new role, moving into a different department, or building new skills through the support and training we offer. Our goal is to create a fun, supportive environment where your success matters just as much as ours, and where you have the tools, encouragement, and opportunities to achieve your goals.

We recognise and value the importance of diversity to help make sure we have a diverse perspective when we are building services to customers and the wider business. This is great news for us. But for us, diversity is also about, building happy energised teams full of people who want to learn and want to be inspired by each other's different backgrounds and experiences.

We review applications on an individual basis, and if we feel you would be a good fit we’ll invite you for a call or Teams video for an informal chat about the role, and to see if we’re a good fit for you.

We value open and honest conversations and collaboration, giving you a chance to learn about what we are doing in an informal and friendly environment. We want to know about you and why you feel that this is the opportunity for you. Please note, this is not a remote role and our expectation is that you will be able to attend Head Office in a hybrid way, in Greater Manchester.