Cyber Security Engineer

Footasylum; Milnrow; On-site; GBP 60,000 - 90,000; Full time

Job summary

Footasylum is seeking a motivated Cyber Security Engineer to join our Information Security team in the UK. You will design, implement, and improve security across cloud, infrastructure, applications, networks, and endpoints.

You will embed security into our digital transformation, advocate for Zero Trust, and drive security automation. You will work with Infrastructure, Platform, Engineering, Development, and Operations to embed security into every project, ensuring robust threat detection and

Qualifications

• Proven experience as a Cyber Security Engineer or similar role.
• Strong understanding of modern cyber security principles and architecture.
• Hands-on experience with SIEM, EDR, and vulnerability management.

Responsibilities

• Design, implement, and maintain security solutions across cloud, infrastructure, application, and endpoint environments.
• Develop and maintain security standards, technical controls, and security architectures.
• Evaluate emerging technologies and recommend improvements to strengthen our security posture.
• Support the implementation of Zero Trust security principles across the organisation.
• Enhance threat prevention, detection, and response capabilities through security engineering best practices.

Skills

Security engineering

Cloud security

Threat detection

Automation

DevSecOps

Zero Trust

Scripting (PowerShell/Python/Bash)

Education

CompTIA Security+

ISC2 Certified in Cybersecurity (CC)

ISC2 SSCP

Microsoft SC-100

CISSP

CISM

CCSP

CEH

OSCP

Terraform Associate

GIAC certifications

Tools

SIEM platforms

EDR

Vulnerability management tools

Identity and Access Management (IAM)

WAF

Security automation tools

Cloud security controls

Microsoft Azure

Job description

We are looking for a talented and motivated Cyber Security Engineer to join our growing Information Security team. This is an exciting opportunity to play a key role in protecting our business, customers, systems, and data while supporting our ongoing digital transformation journey.

As a Cyber Security Engineer, you will design, implement, and enhance security solutions across cloud platforms, infrastructure, applications, networks, and endpoints. Working closely with Infrastructure, Platform, Engineering, Development, and Operations teams, you will help embed security into everything we do.

This role offers the opportunity to influence security strategy, implement modern technologies, drive automation, and support the adoption of DevSecOps and Zero Trust principles across the organisation.

We foster a culture of collaboration, innovation, continuous learning, and empowerment, giving our people the autonomy and support needed to make a real impact.

The Team

The Team is responsible for defining and implementing our cyber security strategy, engineering modern security solutions, driving cloud security initiatives, strengthening threat detection capabilities, and supporting the organisation's wider digital transformation programme.

We operate in a supportive and knowledge-sharing environment where innovation, continuous improvement, and professional development are actively encouraged. Team members are empowered to challenge the status quo, introduce new technologies, automate processes, and influence the direction of our security capabilities., Security Engineering

Key Responsibilities

• You will design, implement, and maintain enterprise security solutions across cloud, infrastructure, application, and endpoint environments.
• You will develop and maintain security standards, technical controls, and security architectures.
• You will evaluate emerging technologies and recommend improvements to strengthen our security posture.
• You will support the implementation of Zero Trust security principles across the organisation.
• You will enhance threat prevention, detection, and response capabilities through security engineering best practices.

Cloud Security

• You will design and implement security controls within Microsoft Azure and hybrid cloud environments.
• You will secure cloud infrastructure using industry best practices and cloud-native security technologies.
• You will implement identity and privileged access management controls.
• You will monitor and remediate cloud security risks and misconfigurations.
• You will participate in cloud security reviews, assessments, and architecture discussions.

Security Operations & Threat Detection

• You will engineer and maintain SIEM, SOAR, and security monitoring platforms.
• You will develop and optimise security alerts, detections, and automated response processes.
• You will collaborate with internal teams and SOC providers to improve threat detection and incident response capabilities.
• You will support security investigations, incident response activities, and root cause analysis.
• You will deliver security automation initiatives that improve operational effectiveness.

Vulnerability Management

• You will implement and maintain vulnerability management processes.
• You will conduct infrastructure, application, and cloud security assessments.
• You will work with technical teams to coordinate remediation activities.
• You will review penetration testing findings and support remediation planning.
• You will perform security reviews and risk assessments for new technologies and services.

Application Security & DevSecOps

• You will integrate security into CI/CD pipelines and development workflows.
• You will support secure coding initiatives and security testing programmes.
• You will implement automated security scanning and validation controls.
• You will collaborate with development teams to reduce application security risks.
• You will promote security-first engineering and DevSecOps best practices.

Network & Infrastructure Security

• You will design and implement secure network architectures.
• You will manage and improve security controls including:
  • Firewalls
  • Web Application Firewalls (WAF)
  • Secure Web Gateways
  • Network Segmentation
  • DDoS Protection
  • API Security Controls
• You will support endpoint security and Mobile Device Management (MDM) solutions.

Security Automation

• You will develop scripts, automation, and orchestration workflows.
• You will automate repetitive security tasks to improve efficiency.
• You will enhance compliance monitoring, reporting, visibility, and alerting capabilities.
• You will support Infrastructure-as-Code (IaC) security reviews and governance.

We are looking for someone who embodies the Footasylum values - Community, Collaborate and Challenge.

• A collaborative team player who enjoys sharing knowledge.
• Detail-oriented with a commitment to quality.
• Comfortable working within a fast-paced technology environment.
• Proactive, accountable, and focused on continuous improvement.

Proven experience as a Cyber Security Engineer, Security Engineer, Cloud Security Engineer, Infrastructure Security Engineer, or similar role.

Strong understanding of modern cyber security principles and security architecture.

Hands-on experience with:

• SIEM and Security Monitoring platforms
• Endpoint Detection and Response (EDR)
• Vulnerability Management solutions
• Identity and Access Management (IAM)
• Network Security technologies
• Web Application Firewalls (WAF)
• Security Automation tools
• Cloud Security Controls

Strong experience securing Microsoft Azure environments.

Experience working within cloud and hybrid infrastructure environments.

Knowledge of application security and secure software development practices.

Experience supporting DevSecOps initiatives.

Scripting and automation experience using technologies such as:

• PowerShell
• Python
• Bash
• Terraform

Excellent troubleshooting, analytical, and problem-solving skills.

Strong communication and stakeholder engagement abilities.

Qualifications

Essential

• CompTIA Security+ (SY0-701)
• ISC2 Certified in Cybersecurity (CC)
• ISC2 SSCP
• Microsoft Cybersecurity Architect Expert (SC-100)
• CISSP
• CISM
• Certified Cloud Security Professional (CCSP)
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• Terraform Associate Certification
• Additional GIAC certifications

Footasylum is a leading UK-based retailer specialising in streetwear and sportswear, committed to delivering innovative and trend-setting products to our customers, with a strong focus on digital transformation and data-driven decision-making.

Why Footasylum?

We are one of the UK's leading omni channel retailers, but as well as that, we're a genuinely great place to work. We value you and your development. Our people across the business have taken on new opportunities, whether that's stepping into a new role, moving into a different department, or building new skills through the support and training we offer. Our goal is to create a fun, supportive environment where your success matters just as much as ours, and where you have the tools, encouragement, and opportunities to achieve your goals.

Diversity

We recognise and value the importance of diversity to help make sure we have a diverse perspective when we are building services to customers and the wider business. This is great news for us. But for us, diversity is also about, building happy energised teams full of people who want to learn and want to be inspired by each other's different backgrounds and experiences.