Infrastructure Security Engineer

Standard 8; England; On-site; GBP 55,000 - 85,000; Full time

Job summary

Standard 8 is recruiting a security infrastructure engineer for an established technology organisation running a complex, security-sensitive infrastructure estate. This is a hands-on engineering role, not a policy-heavy security position.

You'll work across infrastructure, cloud, networking and identity, making sure security is built into the environment rather than bolted on afterwards. You'll be involved in 3rd line support, system hardening, vulnerability remediation, patching,

Qualifications

• 3-5+ years across infrastructure, security engineering or DevSecOps.
• AWS, Azure or GCP security experience is preferred.
• Linux administration and hardening experience is desirable.
• Familiar with IAM, SSO, MFA, RBAC and privileged access.

Responsibilities

• 3rd line support, security engineering tasks and incident response.
• System hardening, patching and vulnerability remediation.
• Implement and enforce access controls across environments.
• Monitor security events and participate in remediation activities.

Skills

Cloud security

Infrastructure background

Incident response

Vulnerability remediation

Troubleshooting

Hands-on security

Tools

Terraform

Ansible

Python

Bash

Docker

Kubernetes

SIEM

EDR

Job description

Standard 8 is recruiting a security infrastructure engineer for an established technology organisation running a complex, security-sensitive infrastructure estate.

This is a hands-on engineering role, not a policy-heavy security position. You'll work across infrastructure, cloud, networking and identity, making sure security is built into the environment rather than bolted on afterwards.

You'll be involved in 3rd line support, system hardening, vulnerability remediation, patching, access controls, monitoring and incident response, alongside infrastructure upgrades and wider technology projects.

We're looking for someone with around 3-5+ years' experience across infrastructure, security engineering or DevSecOps who is comfortable getting into the technical detail.

You'll ideally bring experience across:

• AWS, Azure or GCP security
• Linux administration and hardening
• IAM, SSO, MFA, RBAC and privileged access
• SIEM, EDR and vulnerability management
• TCP/IP, DNS, firewalls, VPNs and proxies
• Terraform, Ansible, Python or Bash
• Docker and Kubernetes
• NIST, CIS Benchmarks and/or ISO 27001
• Security incident investigation and remediation

You don't need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience and the ability to troubleshoot problems.

CISSP, CCSP or Security+ would be useful, but practical experience carries more weight.