Information Security Engineer

TRIA; Birmingham; On-site; GBP 60,000 - 85,000; Full time

Job summary

TRIA is seeking an Information Security Engineer to join its growing internal security team in the United Kingdom. You will own Microsoft security technologies, implement and improve security controls, and support incident response and vulnerability management.

You will work alongside the Head of Security, potentially with a third-party SOC, and contribute to ISO27001 journey, governance, and security operations across the Microsoft estate.

Qualifications

• Experience in security engineering and implementation.
• Experience with incident response and vulnerability management.
• Familiarity with ISO27001, NIST or similar frameworks.
• Experience working with a SOC or managed security provider.

Responsibilities

• Take ownership of Microsoft security technologies and related controls.
• Implement and improve security controls across the Microsoft estate.
• Support incident response and vulnerability management processes.
• Collaborate with the Head of Security and external partners to mature security capabilities.

Skills

Security engineering

Incident response

Vulnerability management

ISO27001/NIST

SOC collaboration

Job description

We're recruiting an Information Security Engineer to join a growing internal security team, taking ownership of Microsoft security technologies while helping shape and mature the organisation's security capability.

The role

You'll work closely with the Head of Security to implement and improve security controls across the Microsoft estate, support incident response and vulnerability management, work alongside a third-party SOC, and contribute to the organisation's ISO27001 journey.

We're looking for experience in:

• Security engineering and implementation
• Incident response & vulnerability management
• ISO27001, NIST or similar security frameworks
• Working with a SOC or managed security provider

This is an excellent opportunity for someone who enjoys hands-on security engineering, wants ownership of key security technologies, and is keen to broaden their experience across engineering, operations and security governance.