Information Security Engineer

ITSS Recruitment Ltd; Greater London; Hybride; GBP 63 000 - 77 000; Plein temps

Avantages offerts par ce poste

Private Healthcare

Enhanced Pension

25 days holiday + bank holidays

Résumé du poste

ITSS Recruitment Ltd is recruiting an Information Security Engineer for a globally recognised healthcare organisation in Central London. The role offers hybrid work (2 days in Marylebone), up to £70,000 with private healthcare, enhanced pension, and 25 days holiday.

The position covers cloud, endpoint and network security and requires strong risk-based decision making. You will manage vulnerability programmes, monitor security tools, and collaborate with infrastructure and application teams to

Qualifications

• Proven experience in Information Security Engineer/Analyst roles.
• Strong understanding of cyber security principles and controls.
• Hands-on vulnerability management experience.
• Experience securing cloud, endpoints and networks.
• Knowledge of IAM, privileged access controls and MFA.
• Experience in regulated/compliance-driven environments.
• Experience with Microsoft security technologies ( Defender, Purview, Entra ID, Sentinel).
• Ability to translate risk findings into practical recommendations for stakeholders.

Responsabilités

• Operate and develop vulnerability management programmes with scanning, prioritisation and remediation tracking.
• Monitor security tools and alerts and assist in incident detection and response.
• Conduct technical investigations, root cause analyses and post-incident reviews.
• Implement and maintain security controls across networks, servers, endpoints and cloud.
• Administer Microsoft security technologies and cloud security services.
• Support endpoint protection, identity security, MFA and log management solutions.
• Work with infrastructure and application teams to ensure secure configurations.
• Maintain security documentation, policies and audit evidence.
• Provide security input into projects and deployments.
• Review designs and deliver risk-based security recommendations.
• Communicate security risks and remediation plans to stakeholders.

Connaissances

Information security

Vulnerability management

Cloud security

Endpoint security

IAM & MFA

Regulatory/compliance

Microsoft security tech

Risk assessment & communication

Formation

AZ-500

SC-200

Security+

CISSP

CISM

CEH

Outils

Microsoft Defender

Microsoft Purview

Entra ID

Microsoft Sentinel

Azure security services

Description du poste

Information Security Engineer

Central London (Marylebone) | Hybrid (2 Days Office) | Up to £70,000 + Excellent Benefits | Private Healthcare | Enhanced Pension | 25 Days Holiday + Bank Holidays | 37.5 Hour Working Week

We're recruiting an Information Security Engineer to join a globally recognised healthcare organisation, helping to protect critical systems, sensitive data and essential business operations.

This is an excellent opportunity to work across a broad security estate covering cloud security, vulnerability management, incident response, security monitoring and security engineering. You'll work closely with infrastructure, applications and business stakeholders to ensure security remains at the forefront of both operational activity and strategic technology initiatives.

Information Security Engineer - Key Responsibilities

• Operate and develop the organisation's vulnerability management programme, including scanning, prioritisation, remediation tracking and reporting.
• Monitor security tools and alerts, supporting the detection, investigation and response to security incidents.
• Conduct technical investigations, root cause analysis and post-incident reviews.
• Implement, configure and maintain security controls across networks, servers, endpoints, cloud platforms and business-critical systems.
• Administer and optimise Microsoft security technologies, including Microsoft Defender, Microsoft Purview, Entra ID, Microsoft Sentinel and Azure security services.
• Support and enhance endpoint protection, identity security, MFA, email security and log management solutions.
• Work with infrastructure and application teams to ensure systems are securely configured, hardened and maintained.
• Ensure systems and services align with relevant regulatory, compliance and security requirements.
• Maintain security documentation, policies, procedures, standards and audit evidence.
• Provide security input into projects, infrastructure changes and technology deployments.
• Review technical designs and deliver pragmatic, risk-based security recommendations.
• Communicate security risks, issues and remediation plans to both technical and non-technical stakeholders.

Act as a key technical security contact for suppliers, partners and third-party service providers.

Required Skills & Experience

• Proven experience within an Information Security Engineer, InfoSec, Information Security Analyst, Security Analyst or Cyber Security role.
• Strong technical understanding of cyber security principles, technologies and controls.
• Hands-on experience operating vulnerability management and remediation processes.
• Experience securing cloud, endpoint and network environments.
• Good understanding of identity and access management (IAM), privileged access controls and multi-factor authentication (MFA).
• Experience working within a regulated or compliance-driven environment.
• Experience with Microsoft security technologies, including Microsoft Defender, Purview, Entra ID, Sentinel and Azure security services.
• Ability to assess security risks and translate findings into practical recommendations for stakeholders.

Desirable Experience

• Security certifications such as AZ-500, SC-200, Security+, CISSP, CISM or CEH.
• Experience supporting security governance, risk and compliance activities.
• Exposure to security monitoring, threat detection and incident response processes.
• Experience within healthcare, financial services or other highly regulated environments.

What's on Offer?

• Salary up to £70,000
• Private Healthcare
• Enhanced Pension
• 25 Days Holiday plus Bank Holidays
• Hybrid Working (2 Days per Week in the Marylebone Office)
• Ongoing Professional Development and Certification Support
• Exposure to Enterprise-Scale Security Technologies and Projects
• Opportunity to influence and mature security practices across the organisation
• Collaborative and supportive working environment