Cyber Security Engineer

Martin Veasey Talent Solutions; East Midlands; Hybrid; GBP 60,000 - 70,000; Full time

Benefits offered by this job

Pension

Enhanced leave

Modern office

Job summary

Martin Veasey Talent Solutions is recruiting for a Cyber Security Engineer in the East Midlands. You will own technical security across the estate and work with IT operations, development and platform teams to strengthen authentication, endpoint security and cloud controls.

You will report to leadership, drive risk-based improvements, and contribute to audits and customer assurance while expanding coverage to a second site. A strong track record in regulated environments is essential.

Qualifications

• Five+ years in cyber security, infrastructure security, cloud security or a closely related technical role in a regulated environment.
• Experience securing enterprise identity and collaboration services, IAM, MFA, conditional access and privileged access.
• Experience securing Windows endpoints through a modern device management platform.
• Experience with vulnerability remediation in a live environment and cloud security essentials.
• Ability to influence and clearly explain security matters to non-technical colleagues.
• Certifications and frameworks such as ISO 27001, Cyber Essentials, NIST CSF or CIS Controls are welcome but not required.

Responsibilities

• Own the technical security of the estate, working with IT operations, development and platform teams.
• Review authentication, access and admin privileges; promote least privilege and zero trust.
• Improve endpoint security, device compliance and secure configuration.
• Assess cloud services and hosted workloads for weaknesses and excessive access.
• Run vulnerability management and coordinate remediation with owners.
• Investigate security alerts and incidents and maintain practical response procedures.
• Review security of third‑party applications, integrations and data sharing.
• Produce clear reporting on risk, incidents and remediation progress and support audits and customer assurance requests.
• Extend security coverage to the new site as the second office opens.

Skills

Cyber security

Identity & access management

Endpoint security

Cloud security

Vulnerability management

Communication

Tools

EDR (Endpoint Detection & Response)

IAM tooling

Job description

£60,000 to 70,000 DOE plus uncapped bonus and benefits

East Midlands - hybrid, minimum two to three days per week on site

Commutable from Leicestershire, Cambridgeshire, Warwickshire, Northamptonshire, Buckinghamshire, Bedfordshire, North Hertfordshire, North Oxfordshire

About the opportunity

Own the technical security of a growing business rather than one narrow slice of a large team.

Our client is a well-established and rapidly growing UK financial services business.

Significant investment has gone into technology and data capability in recent years, including an in‑house development function and a growing analytics team. Headcount continues to expand and a further office opens next year. As the organisation grows, so does the requirement to secure it properly.

This is a hands‑on security engineering role reporting directly to the Head of Technology. It is not a policy or advisory position, and it is not one layer within a large security operations centre. A dedicated Cyber and Data Governance Lead is already in post and owns governance policy, which means your findings have somewhere to go and your recommendations get acted upon.

What you will be doing as a Cyber Security Engineer

You will own the technical security of the estate, working alongside IT operations, development and platform teams. Your remit will include:

• Reviewing and strengthening authentication, access and administrative privilege, promoting least privilege and zero trust principles
• Improving endpoint security, device compliance and secure configuration
• Assessing cloud services and hosted workloads for configuration weaknesses and excessive access
• Running and improving vulnerability and exposure management, coordinating remediation with system owners and verifying that fixes hold
• Investigating security alerts and incidents and maintaining practical response procedures
• Reviewing the security of third‑party applications, integrations and data sharing arrangements
• Producing clear reporting on risk, incidents and remediation progress, and supporting audits and customer assurance requests

As the new second office is established you will extend security coverage to that site, giving you the opportunity to shape how security works across a growing multi‑site estate rather than inheriting one already built.

What we are looking for

At least five years in cyber security, infrastructure security, cloud security or a closely related technical role, gained within a regulated commercial environment such as financial services, insurance, lending, wealth management or professional services.

You will bring practical experience of securing enterprise identity and collaboration services, a working understanding of identity and access management, multifactor authentication, conditional access and privileged access, and experience securing Windows endpoints through a modern device management platform. You will have used endpoint detection and response or comparable technologies, and will have assessed, prioritised and driven the remediation of vulnerabilities in a live environment. Working knowledge of public cloud security is essential, covering identity, networking, logging, data protection and secure configuration.

Just as important is how you work. This role involves a good deal of influencing and persistent, constructive chasing of people who do not report to you. You will need to distinguish genuine risk from technical noise, recommend improvements that are proportionate and achievable, and explain security matters clearly to colleagues who are not technical.

Relevant certifications and experience of frameworks such as ISO 27001, Cyber Essentials, the National Institute of Standards and Technology Cyber Security Framework or the Centre for Internet Security Controls are all welcome, though none is a prerequisite.

Salary, benefits and hybrid working

• Base salary of £60,000 - 70,000 pounds, dependent on experience
• Uncapped annual bonus, typically five to fifteen per cent of base salary
• Hybrid working, two to three days per week on site in the East Midlands office
• Occasional travel to the new Southern office
• Pension, enhanced leave and a modern office environment

The location is commutable from Northampton, Milton Keynes, Wellingborough, Kettering, Corby, Rugby, Daventry, Bedford and Banbury, Bicester, Hitchin, Peterborough, Cambridge, Warwick, Stratford on Avon, Leamington

Please note that Visa Sponsorship is not available for this role and we require candidates with at least 5 years UK based cyber security experience. Unfortunately we cannot accept any overseas applicants for this role.