Information Security Engineer

ed Resourcing Ltd; Hayes End; Hybrid; GBP 57,000 - 67,000; Full time

Benefits offered by this job

Private healthcare eligibility after 6

25 days’ annual leave

Bank holidays

Company pension scheme

Interest-free travel loan

Bicycle loan scheme

Employee Assistance Programme

Job summary

ed Resourcing Ltd in London is looking for a hands-on Information Security Engineer to own security across a major healthcare group, strengthening defences and driving improvements.

You’ll implement, monitor and improve technical security controls across endpoints, networks and cloud, with vulnerability management, risk assessment and regulatory compliance. Hybrid pattern, up to two days home working. Salary £57,000–£67,000 per annum.

Qualifications

• Hands-on information security engineer with practical security controls experience.
• Experience in threat detection, vulnerability management and risk assessment.
• Knowledge of GDPR and NHS DS Toolkit or similar regulatory requirements.
• Experience working in a regulated environment with security incident response.

Responsibilities

• Implement, maintain and improve security controls across endpoints, networks and cloud.
• Identify vulnerabilities, investigate incidents and coordinate remediation.
• Monitor security tools, perform root-cause analysis and post-incident reviews.
• Support data protection compliance and maintain audit evidence.
• Engage with suppliers and stakeholders to drive security improvements.

Skills

Threat detection

Risk assessment

Network hardening

Compliance frameworks

Vulnerability management

Security monitoring

Education

Microsoft Azure Security Engineer Associate (AZ-500)

Microsoft Security Operations Analyst (SC-200)

CISSP

CISM

CompTIA Security+

Tools

Microsoft Defender

Microsoft 365

Microsoft Entra

Azure

Palo Alto

Cisco

Job description

This permanent Information Security Engineer post sits with ed Resourcing Ltd in London, paying £57,000–£67,000 annually on a hybrid pattern of up to two home‑working days weekly. The successful candidate takes ownership of security across a globally recognised healthcare group, strengthening defences within a highly regulated setting. Duties include driving improvements, protecting systems, services and sensitive records, plus hands‑on engineering of controls. Applicants should demonstrate practical expertise in threat detection, risk assessment, network hardening and compliance frameworks. Suited to an experienced professional ready to shape a growing security function and deliver measurable impact. Information Security Engineer Location: London Salary: £57,000–£67,000 per annum Working pattern: Hybrid – up to 2 days working from home Contract: Permanent

About the Opportunity

Are you a hands‑on Information Security Engineer looking for an opportunity to take ownership of security, drive improvements and make a meaningful impact in a highly regulated environment? We’re working with a leading organisation that is investing significantly in its technology, infrastructure and cybersecurity capabilities. As part of a globally recognised healthcare group, the organisation is strengthening its security function and looking for an Information Security Engineer to play a key role in protecting its systems, data and services. This is an exciting opportunity for an experienced security professional to take on greater responsibility, work closely with a wider group cybersecurity team and help shape the development of security practices. You’ll combine hands‑on technical delivery with security monitoring, vulnerability management, risk assessment and continuous improvement, working collaboratively with infrastructure, applications and wider technology teams.

The Role

As Information Security Engineer, you’ll be responsible for implementing, maintaining and improving technical security controls across the organisation. You’ll help identify and address vulnerabilities, investigate potential security incidents and ensure systems are configured securely. Working closely with both local IT colleagues and the wider group security function, you’ll have the opportunity to identify gaps, recommend improvements and take ownership of initiatives that strengthen the organisation’s security posture.

Key Responsibilities

• Manage vulnerability scanning, prioritisation, remediation tracking and reporting, ensuring security weaknesses are addressed effectively.
• Monitor security tools and alerts, supporting the detection, investigation and response to potential security incidents.
• Conduct technical investigations, root cause analysis and post‑incident reviews, recommending improvements to prevent recurrence.
• Implement and maintain security controls across endpoints, networks, servers, cloud services and clinical systems.
• Support endpoint protection, email security, identity and access management, multi‑factor authentication (MFA) and security logging.
• Work with infrastructure and applications teams to improve system hardening, secure configurations and overall security resilience.
• Review technical designs, projects and infrastructure changes, identifying security risks and providing practical recommendations.
• Support compliance with relevant data protection legislation, security standards and regulatory requirements, including GDPR and NHS Data Security and Protection Toolkit principles where applicable.
• Maintain security documentation, procedures, technical standards and audit evidence.
• Engage with third‑party suppliers, managed security providers and group cybersecurity colleagues to resolve issues and drive improvements.
• Communicate security risks, remediation plans and technical recommendations clearly to both technical teams and senior stakeholders.

About You

You’ll be a technically capable security professional who enjoys getting hands‑on, solving problems and taking ownership of security improvements. You’ll be comfortable working independently while collaborating with wider IT and security teams. You’ll ideally bring:

• Previous experience in a dedicated information security, cybersecurity or security engineering role.
• Strong practical knowledge of technical security controls across endpoints, networks, servers and cloud environments.
• Experience managing vulnerabilities, interpreting scan results, prioritising risks and coordinating remediation.
• Experience with security monitoring, alert investigation and incident response.
• Knowledge of Microsoft security technologies, ideally including Microsoft Defender, Microsoft 365, Microsoft Entra and identity security controls.
• An understanding of MFA, endpoint protection, email security, system hardening and security logging.
• Experience working within a regulated environment, with an understanding of data protection and information security compliance.
• The ability to assess technical risks and translate them into clear, proportionate recommendations.
• Strong communication skills, a proactive approach and the confidence to work with stakeholders across different levels of the organisation.

Desirable qualifications and experience

• Microsoft Azure Security Engineer Associate (AZ-500).
• Microsoft Security Operations Analyst (SC-200).
• CISSP, CISM, CompTIA Security+ or CEH.
• Familiarity with Cyber Essentials Plus, MITRE ATT&CK and indicators of compromise (IoCs).
• Experience with vulnerability scanning tools, security operations centres (SOCs) and data loss prevention technologies.
• Professional certifications are desirable rather than essential.
• Support and funding for ongoing training and development are available.

The Technology Environment

The organisation operates a predominantly Microsoft‑based environment, including Microsoft Defender, Microsoft 365, Microsoft Entra and Microsoft Purview, alongside a wider infrastructure estate incorporating Azure Local, VMware, Linux, Palo Alto and Cisco technologies. You’ll have the opportunity to develop your expertise across this environment while working with the wider group cybersecurity function.

Why Join?

This is an opportunity to make a genuine impact in an organisation where security is becoming an increasingly important priority.

You’ll benefit from:

• A competitive salary of £57,000–£67,000.
• Hybrid working, with up to two days working from home.
• A permanent role offering stability and long‑term development.
• Exposure to a wider, established group cybersecurity function.
• The opportunity to take ownership of security improvements and influence how security is delivered locally.
• Access to training, professional development and support towards relevant certifications.
• A comprehensive benefits package, including 25 days’ annual leave plus bank holidays, increasing with length of service.
• Company pension scheme, interest‑free travel loan and bicycle loan scheme.
• Private healthcare eligibility after 12 months of service.
• Retailer discounts and an Employee Assistance Programme.

Interested? If you’re an Information Security Engineer who enjoys solving technical challenges, strengthening security controls and taking ownership of improvements, we’d love to hear from you. Apply today to find out more about this opportunity and how you could help strengthen security within a leading healthcare organisation.