Cyber Security Engineer

Armstrong Talent Partners; Glasgow; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Armstrong Talent Partners is seeking an experienced Security Engineer to join our Corporate IT & Platform infrastructure team in a hybrid role based in Glasgow. The role focuses on integrating security standards into applications and hardening security across our office, manufacturing, and laboratory footprint.

The ideal candidate will drive regulatory compliance (SOC 2, ISO 27001), work with cloud and on-premise environments, and contribute to IaC, GitOps, and policy-based security across the

Qualifications

• Degree in Science, IT, Engineering, or related field, or equivalent practical experience.
• Professional security certifications in one or more of SSCP, AWS Security Specialty (SCS-C02), or CISSP.
• Strong technical proficiency in Python and Kubernetes.
• Experience with containerisation and the design and security of CI/CD pipelines.
• Experience with cloud infrastructure security and securing distributed systems.
• Working knowledge of GDPR, ISO 27001 and related regulatory frameworks.
• Clear communication skills and ability to engage stakeholders at all levels.

Responsibilities

• Build, configure, and support security tools, policies and platform across all aspects of the estate.
• Define and implement DevSecOps requirements for infrastructure, data and application security.
• Lead threat modelling exercises and coordinate penetration testing activities.
• Own security incidents and vulnerability management processes, triage, track, and remediate.
• Implement automated identity, access and authorisation solutions.
• Harden network infrastructure including firewalls, segmentation, VPN, zero-trust controls, and endpoint security.
• Define and improve Controls & Change Management with IT and engineering teams.
• Participate in vendor discussions around secure service introduction and ongoing support.
• Lead vendor compliance reviews and assess third-party tools against security standards.
• Implement real-time compliance monitoring and security observability tooling.
• Drive progress toward SOC 2 and ISO 27001 certification and ongoing compliance.
• Awareness of Endpoint/workstation security provisioning via Intune.

Skills

Python

Kubernetes

CI/CD security

Security best practices

Education

Degree in Science, IT, Engineering, or related field

Tools

Intune

Vanta

SIEM / SOAR tooling

Job description

We are hiring an experienced and hands‑on Security Engineer to join our Corporate IT & Platform infrastructure team in a hybrid role based in Glasgow. The focus for this role is integrating security industry standards into a suite of applications and hardening the application & infrastructure security across our growing office and manufacturing/laboratory footprint.

This role will drive the business towards achieving and maintaining regulatory standards such as SOC 2 and ISO 27001. Reporting to the Head of IT, you will partner and consult with our teams, embedding security across all areas of IT, operations, and software development.

This role would suit a candidate with hands on experience working with complex cloud software, on‑premises hardware/networks. Someone who thrives in a small, dynamic team with a start‑up mentality and the ability to drive real change across a business operating cutting‑edge robotics, GPU infrastructure, and cloud technologies. You will be able apply the technical changes needed to improve security and enforce security via IaC code, GitOps and policy.

Key Responsibilities:

• Build, configure, and support security tools, policies and platform across all aspects of the estate
• Define and implement DevSecOps requirements to address infrastructure, Data and application security needs
• Lead threat modelling exercises and coordinate penetration testing activities
• Own security incidents and vulnerability management processes, ensuring findings are triaged, tracked, and remediated
• Implement automated identity, access and authorisations solutions
• Harden network infrastructure including firewalls, segmentation,vpn, zero-trust access controls, and endpoint security
• Define and improve Controls & Change Management processes in partnership with IT and engineering teams
• Participate in vendor and contractor discussions around secure service introduction and ongoing support

Software & Vendor Assessments

• Lead all aspects of vendor compliance, vendor access controls, and software security reviews through our security compliance and automation platform
• Assess third-party tools and integrations against security standards prior to adoption

Observability, Compliance & Governance

• Implement real-time compliance monitoring and security observability tooling across the business estate
• Drive and maintain progress toward SOC 2 and ISO 27001 certification and ongoing compliance
• Awareness of Endpoint/workstation security provisioning via Intune.

Business Continuity

• Identify and remediate Cyber risks & vulnerabilities across our 24/7 manufacturing environment
• Contribute to business continuity planning and disaster recovery processes

CI/CD Security & Best Practice

• Embed automated scanning and security controls into CI/CD pipelines and define DevSecOps standards for development and data teams
• Publish and disseminate CI/CD security best practices, and provide targeted security training where required

What You’ll Bring

• Degree in Science, IT, Engineering, or a related field, or equivalent practical experience
• Professional security certifications in one or more of: SSCP, AWS Security Specialty (SCS-C02), or CISSP
• Strong technical proficiency in Python and Kubernetes
• Experience with containerisation and the design and security of CI/CD pipelines
• Experience with cloud infrastructure security
• Experience operating secure distributed systems in production environments
• Working knowledge of Cyber Essentials, GDPR, ISO 27001 and related Global regulatory frameworks
• Clear communication skills and the ability to engage and support stakeholders at all levels of the business

Beneficial Skills

• ITSM experience and familiarity with the ITIL framework
• Coaching and mentoring experience — this role will mentor IT engineers and developers on security best practice
• Hands‑on experience with Vanta or a comparable security compliance and automation platform
• Familiarity with SIEM/SOAR tooling and security incident response processes
• Exposure to science/healthcare industry or regulated manufacturing environments