Cybersecurity Engineer

Healix International; Esher; On-site; GBP 65,000 - 95,000; Full time

Job summary

Healix International is seeking an experienced Cybersecurity Analyst to identify, assess and mitigate cyber threats across our operations in the UK. You will own core security platforms, ensure they are configured, monitored and improved to protect Healix systems, data and services.

As the security function matures, you will help shape the long-term security operations model, collaborate with IT teams and external providers, and drive threat detection, incident response and resilience across the

Qualifications

• Minimum 5 years of cybersecurity experience.
• Experience with SIEM/SOAR, threat detection and incident response.
• familiar with Cyber Essentials, CIS benchmarks and ISO27001.
• Strong communication with non-technical stakeholders.
• Experience with cloud security and DevSecOps is a plus.

Responsibilities

• Perform ongoing threat assessments of operational systems.
• Identify threat vectors and propose mitigations.
• Work with risk teams to meet cybersecurity requirements.
• Write playbooks for managing hostile incursions.
• Contribute to security awareness training and workshops.
• Support business continuity and disaster recovery planning.
• Stay informed of regulatory requirements.

Skills

Cyber Essentials knowledge

CIS benchmarks

Network protocols

Operating systems

Security technologies

Troubleshooting

AI‑driven threat detection

Threat intelligence platforms

DevSecOps practices

MITRE ATT&CK

ISO27001 familiarity

Education

Cloud security accreditations (Azure/AWS)

Certified Ethical Hacker (CEH)

Tools

Qualys

Microsoft Defender

Splunk

SolarWinds

Kubernetes

PowerShell

Python

Azure/AWS

Windows Server

Linux

New Relic

HashiCorp

Zerto

Jira

Job description

Job Description

Location

Healix Group, Healix House, Esher Green

About The Role

At Healix International, cybersecurity is critical to protecting our people, clients, and operations. We’re looking for an experienced Cybersecurity Analyst to play a key role in identifying, assessing, and mitigating cyber threats across our operational systems.

The purpose of this role is to ensure that cybersecurity threat vectors are identified in our operational systems and appropriate measures are put in place to safeguard the company.

The role will take ownership of the organisation’s core security platforms, ensuring they are effectively configured, monitored, maintained and continually improved to support the protection of Healix systems, data and services.

As the cybersecurity function matures, this role will also help define the longer‑term operating model for security operations within Healix.

Required Skills, Knowledge And Experience

This position requires:

• Prior experience: Minimum 5 years of experience in cybersecurity.
• Technical acumen and knowledge: Cyber Essentials working experience, CIS benchmarks, strong understanding of network protocols, operating systems, and security technologies. Strong troubleshooting and problem‑solving skills; familiarity with backup, disaster recovery, and business continuity solutions and database technologies. Implementing SIEM & SOAR platforms. Familiarity with threat intelligence platforms and frameworks (e.g. MITRE ATT&CK, Cyber Kill Chain) Additionally, experience with AI driven threat detection and response platforms (e.g. Darktrace), Data Loss Prevention and integration with M365 platforms (e.g. Purview) and exposure to DevSecOps practices and tools would be beneficial. Familiarity with NIST and ISO27001 frameworks is desirable.
• Tools proficiency: Qualys, Microsoft Defender, Splunk, SolarWinds, Kubernetes, PowerShell, Python, Azure/AWS, Windows Server, Linux, New Relic, HashiCorp, Zerto, Jira.
• Communication skills: the ability to communicate complex concepts to non‑technical stakeholders; the ability to collaborate effectively with internal teams, vendors, and service providers to support and resolve issues.
• Management skills: the ability to manage multiple priorities and deliver against agreed timescales. Successful application of these skills and the ability to deliver sustainably against agreed objectives and other performance metrics.

Relevant Qualifications

• Cloud security accreditations such as Microsoft Azure Security Engineer, Microsoft Cybersecurity Architect and/or AWS Certified Security are required.
• Certified Ethical Hacker or equivalent is desirable.

Why join Healix?

You’ll be part of an organisation where cybersecurity is taken seriously, your expertise is valued, and you’re encouraged to keep learning and developing. We support ongoing training, professional development, and certifications as part of your role.

If you’re looking for a role where you can make a real impact on security, resilience, and risk management in a global organisation, we’d love to hear from you.

Role responsibilities and deliverables

This Position Denotes The Following Essential Responsibilities And Deliverables

• Working closely with the Group CTO, Head of IT Operations, Infrastructure team and Solution Architect to perform ongoing threat assessments of the operational systems in the organisation
• to identify threat vectors
• Propose, plan and implement (in conjunction the rest of IT) mitigations and solutions to manage these risks
• Work with the Chief Risk Officer’s team to meet the cybersecurity risk management requirements
• Ability to assess technical requirements and write proposals. Then manage implementation through to go‑live and subsequent ongoing support and development
• Keep abreast with new and emerging threats and the technologies to protect against these threats
• Ensure appropriate automatic monitoring is in place to respond to these threats
• Write the playbooks for managing hostile incursions
• Execute (for test purposes, and if necessary for real) the playbooks including liaison with third party security providers where appropriate in the event of an incursion
• Advise on changes that need to happen outside purely technical measures to safeguard the company, the systems and the data
• Contribute to the development of security awareness training and initiatives
• Participate in security architecture reviews and provide input on secure design for new and existing systems
• Contribute to monthly infosec workshops and external pen test reviews
• Assess and monitor third‑party and supply chain cybersecurity risks
• Develop and report on security metrics and KPIs to demonstrate risk reduction and program effectiveness
• Support business continuity and disaster recovery planning and testing from a cybersecurity perspective
• Stay informed of relevant legal, regulatory, and compliance requirements affecting cybersecurity

Skills Needed

About The Company

We offer UK employee healthcare benefits, and travel, medical and security assistance in every corner of the globe. Our purpose is to help people in difficult situations – whether that’s a cancer diagnosis, a need for medical assistance when they’re far from home, or being caught up in conflict or natural disaster. We talk to them, support them, and make sure they get the help they need. If necessary, we’ll pull them out and bring them home.

We’re co‑ordinators and problem‑solvers: experts at navigating the global health and security landscape. Our teams of doctors, nurses, travel and medical co‑ordinators and security experts make sure that your people will be looked after, whatever happens supported by technology designed help individuals, not slot them into a predetermined solution.

We work with governments, broadcasters, NGOs, international corporations, major insurers and more. No two clients are the same: we adapt our services to their needs.

More importantly, we adapt to the practical and human needs of the individuals we protect. Most of us are on the front line; we keep our back office lean. We don’t use scripts, and we don’t time calls. We never lose sight of the fact that we’re dealing with real people.

Company Culture

Instead, we focus on ensuring our highly trained specialists have the space and time they need to be effective. We let them use their initiative to get the job done, because the situations they face often throw up unexpected challenges – and no protocol survives contact with the real world.

Our clients have thousands of employees and customers, at home and abroad, so they need a business big enough to handle any situation. But they chose Healix because they also need an organisation that’s personal enough to care.

Our people are driven to do things in the best way, not the way they have always been done. We work hard, and our efforts are rewarded with great development opportunities and a supportive team spirit.

We want to nurture this friendly and dynamic company culture so that we can continue to attract diverse talent with a breadth of knowledge and world‑class skills. As a part of Healix, you can expect a range of excellent benefits and an environment where people really do care.

Required Criteria

• Proven cybersecurity experience – 5+ years in a cybersecurity or information security role, protecting complex operational environments
• Strong technical security expertise – hands‑on experience with threat detection, SIEM/SOAR, monitoring, and incident response
• Framework‑led security mindset – working knowledge of Cyber Essentials, CIS benchmarks, and recognised security frameworks
• Clear communicator & collaborator – able to explain complex security risks and controls to non‑technical stakeholders

Desired Criteria

• Industry certifications – CISSP or equivalent (CISM, CEH, GIAC)
• Modern security tooling exposure – experience with AI‑driven detection, DLP, M365 security platforms or cloud environments
• Broader security lifecycle experience – exposure to DevSecOps, red/blue team exercises, or third‑party risk management

Closing Date

Friday 11th September, 2026

Contract Type

fulltime

Salary

Based on Experience