Cyber Security Engineer

Digital Waffle; Manchester; On-site; GBP 45,000 - 65,000; Full time

Job summary

A leading cybersecurity firm based in Manchester seeks a skilled Security Engineer. This on-site role is pivotal in safeguarding systems and ensuring compliance with security standards. The successful candidate will develop and implement security solutions, manage various security technologies, and respond to incidents to protect both the organization and its clients. Ideal for individuals with 3-5 years of experience in the cybersecurity field, this position offers the opportunity to work in a dynamic environment and contribute significantly to security posture management.

Qualifications

• 3-5 years’ experience in a cybersecurity or information security role.
• Experience with vulnerability management and incident response.
• Familiarity with security monitoring tools such as firewalls, IDS/IPS.

Responsibilities

• Review and analyze current security measures to identify strengths and weaknesses.
• Investigate and respond to cybersecurity incidents, ensuring timely resolution.
• Conduct vulnerability assessments and support penetration testing activities.

Skills

Incident response

Vulnerability management

Threat detection

Security documentation

Networking

Tools

CrowdStrike

AWS

SIEM

Firewalls

Job description

My client is seeking a skilled Security Engineer to join their wider cybersecurity function based in Manchester. This is a fully on-site role where you’ll play a key part in safeguarding systems, ensuring compliance with security standards, and protecting both organisational and customer data. You will act as an important escalation point for security-related matters, including incident response, while supporting technical teams in maintaining a strong and compliant security posture.

Key Responsibilities

• Review and analyse current security measures to identify strengths, weaknesses, and areas for improvement
• Develop and deploy effective security solutions to reduce identified risks
• Configure and manage a range of security technologies such as firewalls, intrusion detection/prevention tools, endpoint protection, device management, and monitoring platforms
• Investigate and respond to cybersecurity incidents, ensuring timely resolution and mitigation
• Carry out routine audits and risk assessments to maintain a strong security framework
• Monitor and maintain security controls, producing remediation strategies where necessary
• Conduct vulnerability assessments and support penetration testing activities
• Collaborate with internal IT, cloud, and global teams to maintain secure infrastructure
• Work alongside security operations teams to address threats and operational issues
• Ensure adherence to recognised standards and regulations (e.g. GDPR, ISO 27001, NIST frameworks)
• Maintain and update security documentation, policies, and procedures
• Support client-facing requirements in line with contractual security obligations
• Assist with both internal and external audit processes, providing guidance to technical teams
• Produce reports on security posture, risks, and ongoing improvements for stakeholders
• Recommend and implement new tools, technologies, and best practices to enhance security capability
• Keep up to date with emerging threats and trends, applying relevant improvements to the business

Skills & Experience

• 3–5 years’ experience in a cybersecurity or information security role
• Solid grounding in core security concepts, frameworks, and industry best practices
• Experience across infrastructure and networking environments, both on-premise and cloud-based
• Hands‑on involvement in vulnerability management and incident response
• Familiarity with security monitoring tools such as firewalls, IDS/IPS, and extended detection solutions
• Experience working with SIEM, cloud security platforms, or log management tools (e.g. CrowdStrike, Lacework or similar)
• Exposure to identity and access management (IAM) implementations
• Ability to contribute effectively within a team and deliver work to agreed timelines
• Strong organisational skills with the ability to manage tasks independently
• Experience with AWS environments and/or relevant certifications
• Background in security-focused roles and/or industry certifications
• Competence working with both Windows and Linux systems, including network analysis tools
• Good judgement when handling sensitive or confidential information
• Understanding of Public Key Infrastructure (PKI) concepts