Cyber Security Engineer

Footasylum; Manchester; On-site; GBP 70,000 - 110,000; Full time

Job summary

Footasylum is seeking a talented Cyber Security Engineer to join our Information Security team in Manchester. You will design, implement, and enhance security across cloud, infrastructure, applications, networks, and endpoints, collaborating with Infrastructure, Platform, Engineering, Development, and Operations to embed security into every initiative.

The role offers opportunities to influence security strategy, adopt DevSecOps and Zero Trust, and drive automation while supporting our digital

Qualifications

• Proven experience in cyber security engineering and security architecture.
• Experience with Azure and hybrid cloud security.
• Ability to implement Zero Trust and DevSecOps.
• Strong collaboration with cross-functional teams.

Responsibilities

• Design, implement, and maintain enterprise security across cloud, infra, apps, and endpoints.
• Develop security standards, controls, and architectures.
• Evaluate emerging security technologies and improve posture.
• Support Zero Trust adoption across the organization.
• Enhance threat detection, response, and automation.

Skills

SIEM

EDR

IAM

WAF

Threat detection

Cloud security

DevSecOps

Zero Trust

Security automation

Education

CompTIA Security+ (SY0-701)

CISSP

CISM

CCSP

CEH

OSCP

Terraform Associate Certification

GIAC certifications

Tools

PowerShell

Python

Bash

Terraform

Job description

We are looking for a talented and motivated Cyber Security Engineer to join our growing Information Security team. This is an exciting opportunity to play a key role in protecting our business, customers, systems, and data while supporting our ongoing digital transformation journey.

As a Cyber Security Engineer, you will design, implement, and enhance security solutions across cloud platforms, infrastructure, applications, networks, and endpoints. Working closely with Infrastructure, Platform, Engineering, Development, and Operations teams, you will help embed security into everything we do.

This role offers the opportunity to influence security strategy, implement modern technologies, drive automation, and support the adoption of DevSecOps and Zero Trust principles across the organisation.

We foster a culture of collaboration, innovation, continuous learning, and empowerment, giving our people the autonomy and support needed to make a real impact.

The Team

The Team is responsible for defining and implementing our cyber security strategy, engineering modern security solutions, driving cloud security initiatives, strengthening threat detection capabilities, and supporting the organisation's wider digital transformation programme.

We operate in a supportive and knowledge-sharing environment where innovation, continuous improvement, and professional development are actively encouraged. Team members are empowered to challenge the status quo, introduce new technologies, automate processes, and influence the direction of our security capabilities.

Security Engineering

• You will design, implement, and maintain enterprise security solutions across cloud, infrastructure, application, and endpoint environments.
• You will develop and maintain security standards, technical controls, and security architectures.
• You will evaluate emerging technologies and recommend improvements to strengthen our security posture.
• You will support the implementation of Zero Trust security principles across the organisation.
• You will enhance threat prevention, detection, and response capabilities through security engineering best practices.

Cloud Security

• You will design and implement security controls within Microsoft Azure and hybrid cloud environments.
• You will secure cloud infrastructure using industry best practices and cloud-native security technologies.
• You will implement identity and privileged access management controls.
• You will monitor and remediate cloud security risks and misconfigurations.
• You will participate in cloud security reviews, assessments, and architecture discussions.

Security Operations & Threat Detection

• You will engineer and maintain SIEM, SOAR, and security monitoring platforms.
• You will develop and optimise security alerts, detections, and automated response processes.
• You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities.
• You will support security investigations, incident response activities, and root cause analysis.
• You will deliver security automation initiatives that improve operational effectiveness.

Vulnerability Management

• You will implement and maintain vulnerability management processes.
• You will conduct infrastructure, application, and cloud security assessments.
• You will work with technical teams to coordinate remediation activities.
• You will review penetration testing findings and support remediation planning.
• You will perform security reviews and risk assessments for new technologies and services.

Application Security & DevSecOps

• You will integrate security into CI/CD pipelines and development workflows.
• You will support secure coding initiatives and security testing programmes.
• You will implement automated security scanning and validation controls.
• You will collaborate with development teams to reduce application security risks.
• You will promote security-first engineering and DevSecOps best practices.

Network & Infrastructure Security

You will design and implement secure network architectures.

You will manage and improve security controls including:

• Firewalls
• Web Application Firewalls (WAF)
• Secure Web Gateways
• Network Segmentation
• DDoS Protection
• API Security Controls

You will support endpoint security and Mobile Device Management (MDM) solutions.

Security Automation

• You will develop scripts, automation, and orchestration workflows.
• You will automate repetitive security tasks to improve efficiency.
• You will enhance compliance monitoring, reporting, visibility, and alerting capabilities.
• You will support Infrastructure-as-Code (IaC) security reviews and governance.

We are looking for someone who embodies the Footasylum values - Community, Collaborate and Challenge.

You will be passionate about cyber security and emerging technologies.

You will be naturally curious and eager to solve complex problems.

You will have the ability to balance security requirements with business objectives.

Along with;

• A collaborative team player who enjoys sharing knowledge.
• Detail-oriented with a commitment to quality.
• Comfortable working within a fast-paced technology environment.
• Proactive, accountable, and focused on continuous improvement.

Proven experience as a Cyber Security Engineer, Security Engineer, Cloud Security Engineer, Infrastructure Security Engineer, or similar role.

Strong understanding of modern cyber security principles and security architecture.

Hands-on experience with:

• SIEM and Security Monitoring platforms
• Endpoint Detection and Response (EDR)
• Vulnerability Management solutions
• Identity and Access Management (IAM)
• Network Security technologies
• Web Application Firewalls (WAF)
• Security Automation tools
• Cloud Security Controls

Strong experience securing Microsoft Azure environments.

Experience working within cloud and hybrid infrastructure environments.

Knowledge of application security and secure software development practices.

Experience supporting DevSecOps initiatives.

Scripting and automation experience using technologies such as:

• PowerShell
• Python
• Bash
• Terraform

Excellent troubleshooting, analytical, and problem-solving skills.

Strong communication and stakeholder engagement abilities.

Qualifications

Essential

• CompTIA Security+ (SY0-701)
• ISC2 Certified in Cybersecurity (CC)
• ISC2 SSCP, Microsoft Cybersecurity Architect Expert (SC-100)
• CISSP
• CISM
• Certified Cloud Security Professional (CCSP)
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• Terraform Associate Certification
• Additional GIAC certifications

No two days are the same. We encourage autonomy, creativity, imagination and ambition to be fuelled by the core principle that we create an environment for our colleagues to be successful. People who are motivated by being part of a successful team, whilst having the opportunity to express their passion and make a difference are who we want. We have a high performing, energetic environment and we want you to be a part of it. Sound like something you want to be a part of? Check out our latest Footasylum jobs today.

Footasylum is a leading UK-based retailer specialising in streetwear and sportswear, committed to delivering innovative and trend-setting products to our customers, with a strong focus on digital transformation and data-driven decision-making.

Why Footasylum?

We are one of the UK's leading omni channel retailers, but as well as that, we're a genuinely great place to work. We value you and your development. Our people across the business have taken on new opportunities, whether that's stepping into a new role, moving into a different department, or building new skills through the support and training we offer. Our goal is to create a fun, supportive environment where your success matters just as much as ours, and where you have the tools, encouragement, and opportunities to achieve your goals.

Diversity

We recognise and value the importance of diversity to help make sure we have a diverse perspective when we are building services to customers and the wider business. This is great news for us. But for us, diversity is also about, building happy energised teams full of people who want to learn and want to be inspired by each other's different backgrounds and experiences.

About Footasylum

We've been the go-to for the freshest trainer and apparel releases since 2005, whether it's big name brands or emerging bedroom labels we've got it covered. With over 65 high-street stores across the UK, we're taking over the high street one step at a time.

Founded in 2005

Co-workers 2500