Hybrid Security Engineer — SC Clearance Eligible

Littlefish Group; East Midlands; Hybrid; GBP 50,000 - 75,000; Full time

Benefits offered by this job

The Littlefish Academy training

Referral bonus scheme

LinkedIn Learning access

Healthcare cash plan

Casual dress policy

Company Pension Scheme

Company social events

25 days annual leave + bank holidays

Annual leave purchase

Job summary

Littlefish is seeking an Internal Security Engineer to join its growing cyber security function in a hybrid role based in Nottingham or Sheffield. You will support governance, assurance and controls across ISO 27001, Cyber Essentials Plus and related frameworks, helping to strengthen our security posture.

You’ll work hands-on to manage vulnerabilities, improve configurations in Microsoft 365 and Azure, and contribute to risk management, security documentation, and awareness initiatives in a

Qualifications

• Experience administering enterprise security tooling in Microsoft 365 and Azure.
• ,

Responsibilities

• Support ISO 27001 activities and security control management.
• Remediate vulnerabilities across endpoints, servers, and cloud services.
• Improve security configurations in Microsoft 365 and Azure.
• Maintain Cyber Essentials Plus, NCSC CAF, and other frameworks.
• Maintain risk registers and support risk management processes.
• Develop, test, and maintain Business Continuity and Disaster Recovery plans.
• Create and maintain security documentation.
• Support security awareness initiatives and compliance communications.

Skills

Microsoft 365 security tooling

Azure security

Vulnerability management

PowerShell automation

Security governance

ISO 27001

Defender for Endpoint

Security certifications (SC-200, SC-3x

Tools

Microsoft 365

Azure

Microsoft Defender

Intune

Job description

Littlefish is seeking an Internal Security Engineer to join its growing cyber security function in a hybrid role based in Nottingham or Sheffield. You will support governance, assurance and controls across ISO 27001, Cyber Essentials Plus and related frameworks, helping to strengthen our security posture.

You’ll work hands-on to manage vulnerabilities, improve configurations in Microsoft 365 and Azure, and contribute to risk management, security documentation, and awareness initiatives in a