Infrastructure Security Engineer

Standard 8; Guildford; On-site; GBP 60,000 - 85,000; Full time

Job summary

Standard 8 is recruiting a security infrastructure engineer for an established technology organisation running a complex, security-sensitive infrastructure estate. This hands-on role blends infrastructure, cloud, networking and identity to ensure security is embedded by design.

You’ll contribute to 3rd line support, system hardening, vulnerability remediation, patching, access controls, monitoring and incident response, alongside broader technology upgrades and projects.

Qualifications

• 3-5+ years of experience in infrastructure, security engineering or DevSecOps.
• Strong hands-on technical background and problem-solving.
• Experience across AWS/Azure/GCP security is beneficial.
• Familiarity with CIS Benchmarks / ISO 27001 is a plus.

Responsibilities

• 3rd line security engineering and incident response tasks.
• System hardening and patch management.
• Manage access controls, IAM and privileged access.
• Monitor security posture and coordinate vulnerability remediation.
• Support infrastructure upgrades and security projects.

Skills

Infrastructure background

Security engineering/DevSecOps

Hands-on

Troubleshooting

Cloud and on-prem experience

Tools

Terraform

Ansible

Python

Bash

Docker

Kubernetes

Job description

Standard 8 is recruiting a security infrastructure engineer for an established technology organisation running a complex, security-sensitive infrastructure estate.

This is a hands-on engineering role, not a policy-heavy security position. You'll work across infrastructure, cloud, networking and identity, making sure security is built into the environment rather than bolted on afterwards.

You'll be involved in 3rd line support, system hardening, vulnerability remediation, patching, access controls, monitoring and incident response, alongside infrastructure upgrades and wider technology projects.

We're looking for someone with around 3-5+ years' experience across infrastructure, security engineering or DevSecOps who is comfortable getting into the technical detail.

You'll ideally bring experience across:

• AWS, Azure or GCP security
• Linux administration and hardening
• IAM, SSO, MFA, RBAC and privileged access
• SIEM, EDR and vulnerability management
• TCP/IP, DNS, firewalls, VPNs and proxies
• Terraform, Ansible, Python or Bash
• Docker and Kubernetes
• NIST, CIS Benchmarks and/or ISO 27001
• Security incident investigation and remediation

You don't need to tick every box. What matters is a strong infrastructure background, credible hands-on security experience and the ability to troubleshoot problems.

CISSP, CCSP or Security+ would be useful, but practical experience carries more weight.