Information Security Systems Engineer

V.Group; Glasgow; On-site; GBP 40,000 - 60,000; Full time

Job summary

V.Group is seeking an Information Security Engineer to join the team in Glasgow. You will work with security, infrastructure and vessel technology teams to deliver and operate cyber security controls.

The role focuses on monitoring, triage, vulnerability remediation and incident response, with opportunity to grow in a global, multi-site organisation and learn maritime cyber security context.

Qualifications

• Experience in IT security, security operations or related technical roles.
• Familiar with monitoring, triage and escalation of security events.
• Knowledge of Windows, Azure, M365 and Entra ID environments.
• Understanding networking concepts (TCP/IP, DNS, VPNs, firewalls).
• Ability to document findings and communicate risk clearly.

Responsibilities

• Monitor security alerts and logs, triage events and incidents.
• Support operation of security stack including endpoint and cloud security.
• Assist with vulnerability remediation tracking and reporting.
• Support infrastructure hardening and patching activities.
• Investigate phishing, malware and suspicious activity; escalate when needed.
• Produce clear written updates and operational reports for stakeholders.
• Contribute to security tests, audits and evidence gathering.
• Collaborate with IT, service desk and vendor teams to resolve issues.

Skills

Security monitoring

Incident triage

Endpoint protection

Vulnerability management

Cloud security

SIEM/SOC tooling

Network fundamentals

Windows/Azure administration

Written updates

Education

Security+ or equivalent

Azure fundamentals

ITIL Foundation

Networking fundamentals

SANS/GIAC/CISSP desirable

Tools

Endpoint protection

Vulnerability management

SIEM/SOC tooling

Email security

Identity protection

Web security

Cloud security platforms

Job description

Work closely with security, support, infrastructure and vessel technology teams to help deliver, operate and improve cyber security controls, including but not limited to:

• Monitor security alerts, logs and dashboards from security tooling and support initial triage of events and incidents;
• Support the operation and administration of the security stack, including endpoint protection, vulnerability management, email security, cloud security, SIEM/SOC integrations and secure access controls;
• Assist with vulnerability review, prioritisation, remediation tracking and reporting across servers, endpoints, cloud services and network infrastructure;
• Support infrastructure hardening activities, including Microsoft Windows, Windows Server, Azure, network devices, identity services and privileged access controls;
• Provide cyber security support to vessel-facing systems and connectivity, working with technical teams to assess risks, review configurations and support secure remediation;
• Help investigate phishing, malware, account compromise, suspicious activity and other common security events, escalating where required;
• Maintain security procedures, runbooks, knowledge articles and operational records to support consistent incident response and control operation;
• Support periodic security testing, control checks and evidence gathering for audits, assurance activities and security improvement plans;
• Produce clear operational updates, reports and recommendations for technical and non-technical stakeholders;
• Stay aware of current cyber threats, vulnerabilities and security good practice and apply this knowledge to day‑to‑day operational activity.

Experience

• Approximately three years’ experience in IT security, security operations, infrastructure support, cloud operations or a closely related technical role;
• Monitoring, triaging and escalating security alerts, incidents or vulnerability findings;
• Using or supporting common security tools such as endpoint protection, vulnerability management, SIEM/SOC tooling, email security, identity protection, web security or cloud security platforms;
• Supporting Microsoft Windows, Windows Server, Microsoft Azure, Microsoft 365, Active Directory or Entra ID environments;
• Understanding core networking concepts, including TCP/IP, DNS, routing, switching, firewalls, VPNs, VLANs, LAN and WAN connectivity;
• Supporting infrastructure hardening, secure configuration baselines, patching and remediation activity;
• Analysing common cyber events such as phishing, malware alerts, suspicious logons, exposed vulnerabilities and misconfigurations;
• Producing clear written updates, tickets, reports and recommendations for technical and non-technical audiences;
• Working collaboratively with infrastructure, service desk, application and third‑party support teams to resolve security issues.

Professional / Technical Experience

• The Information Security Engineer will have a practical technical skill set and will support the delivery of Information Security and Cyber Security activities across a global and diverse estate. The role is intended for a junior-to-mid level security professional who can work with established processes, follow runbooks, investigate common security events, manage or support security tooling, and escalating complex issues appropriately. The role holder should be organised, curious and confident working with security, infrastructure, service desk, cloud and vessel technology teams. Maritime experience is not required; however, an interest in learning how cyber security supports vessel operations and marine services is expected.

Managerial Experience

• Experience working in or alongside an IT security, security operations, infrastructure, cloud or technical support team, preferably in a global or multi‑site organisation.

Team working

• This role does not have direct line management responsibility. The role holder will work closely with colleagues across Information Security, infrastructure, service desk, cloud, applications, vessel support and third‑party providers. They must be able to manage their own workload, follow agreed processes, communicate clearly and elevate issues at the right time.

Academic and Professional Qualifications

• A degree is not essential where the candidate can demonstrate relevant practical experience. Suitable foundation or practitioner training is desirable, such as Security+, Microsoft security fundamentals or associate‑level certification, Azure fundamentals, networking training, ITIL foundation, vendor training for security tools, or equivalent cyber security courses. The role holder should be willing to continue developing technical cyber security skills.

Language Skills

• Vgroup is an international company and has a very diverse language base. V.Group’s first language is English, and the role holder will have an excellent command of the English language but be able to communicate with international colleagues. Strong written and verbal communication skills are required to deliver against our commitment to providing a world class service and drive our dedication to the client experience.

Personal Attributes

• The Information Security Engineer will be a reliable and proactive member of the security team, with strong attention to detail and a willingness to learn. They should be able to follow process, investigate issues methodically, document findings clearly and communicate risks in a practical way. They should be comfortable asking questions, escalating when needed and working with colleagues across different technical areas and locations. The role requires good prioritisation, problem solving, ownership of assigned tasks and a strong service mindset.

• CompTIA Security+
• Microsoft SC-900, AZ-900 or associate‑level Microsoft security certification
• Vendor training for security tooling used by the organisation
• ITIL Foundation
• Networking or cloud fundamentals training
• SANS, GIAC, CEH, CISSP or similar advanced certifications are desirable but not required for appointment
• Maritime, vessel operations or operational technology experience is helpful but not required. The successful candidate will be expected to learn the maritime operating environment and apply cyber security good practice to vessel‑facing systems and services