Cyber Security Engineer

Martin Veasey Talent Solutions; East Midlands; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Very competitive base salary

Uncapped bonus

Hybrid working

Pension

Enhanced leave

Modern office

Job summary

Martin Veasey Talent Solutions is recruiting a hands-on Cyber Security Engineer for a growing UK financial services business based in the East Midlands. You will own the technical security of the estate, collaborating with IT operations, development and platform teams to strengthen authentication, endpoint security and cloud security.

As the security lead for multiple sites, you will drive remediation, run vulnerability management, and report risk and progress while supporting audits and

Qualifications

• Five+ years in cyber security or related technical role in regulated environments.
• Experience securing enterprise identity and collaboration services, IAM and MFA.
• Knowledge of cloud security, identity, networking and logging principles.
• Experience prioritising and remediating vulnerabilities in live environments.
• Ability to explain security matters clearly to non-technical colleagues.

Responsibilities

• Own the technical security of the estate, collaborating with IT operations, dev and platform teams.
• Review authentication, access control and privilege management to enforce least privilege and zero trust.
• Improve endpoint security, device compliance and secure configuration.
• Assess cloud services and workloads for configuration weaknesses and access risk.
• Run vulnerability and exposure management and coordinate remediation with owners.
• Produce reporting on risk, incidents and remediation progress; support audits.

Skills

Cyber security

Cloud security

Identity and access management

Vulnerability management

Endpoint security

Tools

Endpoint Detection and Response

Job description

£Very Competitive DOE plus uncapped bonus and benefits

East Midlands - hybrid, minimum two to three days per week on site

Commutable from Leicestershire, Cambridgeshire, Warwickshire, Northamptonshire, Buckinghamshire, Bedfordshire, North Hertfordshire, North Oxfordshire

About the opportunity

Own the technical security of a growing business rather than one narrow slice of a large team.

Our client is a well-established and rapidly growing UK financial services business.

Significant investment has gone into technology and data capability in recent years, including an in-house development function and a growing analytics team. Headcount continues to expand and a further office opens next year. As the organisation grows, so does the requirement to secure it properly.

This is a hands‑on security engineering role reporting directly to the Head of Technology. It is not a policy or advisory position, and it is not one layer within a large security operations centre. A dedicated Cyber and Data Governance Lead is already in post and owns governance policy, which means your findings have somewhere to go and your recommendations get acted upon.

What you will be doing as a Cyber Security Engineer

You will own the technical security of the estate, working alongside IT operations, development and platform teams. Your remit will include:

• Reviewing and strengthening authentication, access and administrative privilege, promoting least privilege and zero trust principles
• Improving endpoint security, device compliance and secure configuration
• Assessing cloud services and hosted workloads for configuration weaknesses and excessive access
• Running and improving vulnerability and exposure management, coordinating remediation with system owners and verifying that fixes hold
• Investigating security alerts and incidents and maintaining practical response procedures
• Reviewing the security of third‑party applications, integrations and data sharing arrangements
• Producing clear reporting on risk, incidents and remediation progress, and supporting audits and customer assurance requests

As the new second office is established you will extend security coverage to that site, giving you the opportunity to shape how security works across a growing multi‑site estate rather than inheriting one already built.

What we are looking for

At least five years in cyber security, infrastructure security, cloud security or a closely related technical role, gained within a regulated commercial environment such as financial services, insurance, lending, wealth management or professional services.

You will bring practical experience of securing enterprise identity and collaboration services, a working understanding of identity and access management, multifactor authentication, conditional access and privileged access, and experience securing Windows endpoints through a modern device management platform. You will have used endpoint detection and response or comparable technologies, and will have assessed, prioritised and driven the remediation of vulnerabilities in a live environment. Working knowledge of public cloud security is essential, covering identity, networking, logging, data protection and secure configuration.

Just as important is how you work. This role involves a good deal of influencing and persistent, constructive chasing of people who do not report to you. You will need to distinguish genuine risk from technical noise, recommend improvements that are proportionate and achievable, and explain security matters clearly to colleagues who are not technical.

Relevant certifications and experience of frameworks such as ISO 27001, Cyber Essentials, the National Institute of Standards and Technology Cyber Security Framework or the Centre for Internet Security Controls are all welcome, though none is a prerequisite.

Salary, benefits and hybrid working

• Very Competitive Base salary, dependent on experience
• Uncapped annual bonus, typically five to fifteen per cent of base salary
• Hybrid working, two to three days per week on site in the East Midlands office
• Occasional travel to the new Southern office
• Pension, enhanced leave and a modern office environment

The location is commutable from Northampton, Milton Keynes, Wellingborough, Kettering, Corby, Rugby, Daventry, Bedford and Banbury, Bicester, Hitchin, Peterborough, Cambridge, Warwick, Stratford on Avon, Leamington

Please note that Visa Sponsorship is not available for this role and we require candidates with at least 5 years UK based cyber security experience. Unfortunately we cannot accept any overseas applicants for this role.