Infrastructure Security Engineer

Marshall Wolfe; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Marshall Wolfe in London is seeking an experienced Infrastructure Security Engineer to join a globally recognised luxury hospitality brand's IT team. You will own vulnerability remediation, threat response, and security assessments across on‑premises infrastructure and Microsoft Azure cloud environments.

This hands‑on role requires a strong IT infrastructure background, effective communication with stakeholders, and the ability to drive security improvements across a multi‑location estate.

Qualifications

• Strong background in IT infrastructure, systems engineering, or support.
• Proven experience in cyber security operations and vulnerability remediation.
• Experience with penetration testing and vulnerability management outputs.
• Strong knowledge of Active Directory security, Microsoft Azure, and hybrid environments.
• Understanding of identity and access management, patch management, and security monitoring.
• Excellent communication and stakeholder management skills.

Responsibilities

• Manage and resolve cyber security incidents, investigations, and technical issues.
• Monitor, triage, and respond to threats through enterprise XDR platforms.
• Act as an escalation point for high‑risk security events and incidents.
• Lead remediation of findings from penetration tests, vulnerability scans, and security assessments.
• Work with infrastructure, cloud, and regional IT teams to address security weaknesses.
• Drive continuous improvement of security controls, standards, and configurations.
• Provide security expertise throughout IT and business projects.
• Review architectures and designs to embed security requirements from the outset.

Skills

Vulnerability remediation

Cyber security operations

Threat detection & response

Active Directory security

Azure hybrid environments

Stakeholder management

Tools

Azure cloud

Active Directory

XDR platforms

Palo Alto firewalls

Job description

Infrastructure Security Engineer - Cyber Security Engineer

Our client, a globally recognised luxury hospitality brand, is seeking an experienced Cyber Security Engineer to join their growing IT team. This is an exciting opportunity for a hands‑on security professional to play a key role in strengthening and evolving the organisation's cyber security capabilities across both on‑premises infrastructure and Microsoft Azure cloud environments. As the Cyber Security Engineer, you will act as the technical cyber security subject matter expert, taking ownership of vulnerability remediation, threat response, security assessments, and the continuous improvement of security controls across a global estate. The role is ideal for someone with a strong IT infrastructure or systems engineering background who has successfully transitioned into cyber security and enjoys a hands‑on, operational environment.

Key Responsibilities

• Manage and resolve cyber security incidents, investigations, and technical issues.
• Monitor, triage, and respond to threats through enterprise XDR platforms.
• Act as an escalation point for high‑risk security events and incidents.

Vulnerability Management

• Lead the remediation of findings from penetration tests, vulnerability scans, and security assessments.
• Work closely with infrastructure, cloud, and regional IT teams to address security weaknesses.
• Track remediation activities and ensure security risks are appropriately managed and closed.

Security Posture & Risk Management

• Conduct technical security reviews and assessments across infrastructure and cloud environments.
• Identify security gaps, assess risks, and implement practical remediation strategies.
• Drive continuous improvement of security controls, standards, and configurations.

Projects & Governance

• Provide security expertise throughout IT and business projects.
• Review architectures and technical designs to ensure security requirements are embedded from the outset.
• Support audits, compliance initiatives, and security governance activities.

Global Stakeholder Engagement

• Collaborate with regional IT teams to maintain consistent security standards.
• Provide guidance and support to technical teams across multiple locations.
• Build strong relationships with stakeholders throughout the business.

Required Experience

• Strong background in IT infrastructure, systems engineering, or support.
• Proven experience in cyber security operations and vulnerability remediation.
• Experience working with penetration testing and vulnerability management outputs.
• Strong knowledge of Active Directory security, Microsoft Azure, and hybrid environments.
• Understanding of identity and access management, patch management, and security monitoring.
• Excellent communication and stakeholder management skills.

Desirable

• Exposure to ISO 27001, CIS Controls, or similar security frameworks.
• Security certifications such as CISSP, SSCP, GIAC, or Microsoft Security certifications.
• Experience with Palo Alto or other next‑generation firewall technologies.
• Hands‑on experience with XDR platforms and threat investigation.
• Experience supporting enterprise‑scale hybrid infrastructure environments.