IT Infrastructure and Security Engineer · Colchester ·
Bulk™
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
Bulk™ in Colchester, UK, seeks an IT Infrastructure and Security Engineer to oversee on‑premise and cloud infrastructure, drive security posture, and enable AI tooling across the business.
You will partner with leadership to improve resilience, manage incidents, and ensure compliance with Cyber Essentials and ISO 27001 while supporting a hybrid work model.
Qualifications
- Bachelor’s degree in Cybersecurity, IT, or related field and relevant certifications.
- Hands-on experience with infrastructure management, cloud solutions, and security frameworks.
- Strong knowledge of security monitoring and incident response.
Responsibilities
- Oversee IT infrastructure planning, design, implementation, monitoring, and maintenance (on‑premise and cloud).
- Lead incident response lifecycle and manage security incidents and data breach containment.
- Manage security tools (SIEM, SOAR, EDR/MDR/XDR) and cloud security solutions.
- Perform threat analysis and coordinate with stakeholders on secure technology solutions.
- Lead cybersecurity audits, compliance initiatives and vendor security assessments.
- Set up and administer AI coding/agent tools and integrations.
Skills
Education
Tools
Job description
At Bulk™, we believe the gym changes everything. It makes you feel stronger, fitter and healthier. For 20 years, we’ve been developing elite sports nutrition products for every type of training. Trusted by Olympic athletes and everyday gym-goers, we help you power through training, push your limits, and achieve more.
Join us, and be part of what's next.
As the IT Infrastructure and Security Engineer, you’ll oversee Bulk’s IT infrastructure and security posture, creating a resilient technical foundation while supporting AI adoption across the business. This role blends hands‑on infrastructure management and cyber defence with strategic improvements, threat management, and compliance. You’ll also partner with senior leadership to optimise key toolsets that drive Bulk’s ongoing growth.
- Oversee the planning, design, implementation, monitoring, and maintenance of Bulk’s IT infrastructure, including on‑premise and cloud‑based systems (Google Workspace, Azure, network, firewall, VPN, etc).
- Ensure system reliability, resilience, performance, and secure configuration, and updates, adhering to industry best practices.
- Lead infrastructure projects, from capacity planning to deployment, to support evolving business requirements.
- Support 2nd and 3rd line issues, guiding troubleshooting and resolution in line with SLAs
- Create and maintain technical documentation, policies, and procedures, ensuring smooth handover to Service Desk teams.
- Lead the incident response lifecycle, including managing security incidents and data breach containment, eradication, and post-mortem analysis.
- Serve as a dedicated Tier 3 escalation point for the Helpdesk team, providing expert advanced technical support and resolution for complex incidents.
- Own the setup, configuration, and maintenance of AI tooling across the business (e.g., Claude Code, Cowork, Codex-style coding/agent tools), including integrations, MCP server configuration, and connector management.
- Manage user access, permissions, and governance for AI tools, ensuring least‑privilege access and secure connector/integration setup.
- Partner with teams to onboard new AI tools and integrations, balancing productivity gains with security and compliance requirements.
- Develop and implement security measures to protect Bulk’s IT environment, continuously enhancing the security framework.
- Monitor, investigate, and remediate security alerts, incidents, and Indicators of Compromise (IOCs).
- Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities.
- Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE).
- Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials, ISO 27001).
- Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.
- Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions.
- Bachelor’s degree in Cybersecurity, IT, or a related field; relevant certifications (e.g., CISSP, CISM, CompTIA, ITIL).
- 3+ years’ experience in infrastructure and security management within a medium-sized enterprise.
- Proficient in networking, cloud, and endpoint security technologies, including CrowdStrike, Cisco, Azure, VSphere, Windows Server, Mac/Windows, Jamf/Intune MDMs Automox, and VPNs.
- Hands‑on experience with infrastructure management, cloud solutions (Azure, Google Workspace), and security frameworks.
- Strong knowledge of security monitoring, incident response, and threat analysis, including managing IOCs and remediation.
- Experience with compliance standards (e.g., Cyber Essentials, ISO 27001) and conducting vendor security assessments.
- Experience setting up and administering AI coding/agent tools (e.g., Claude Code, GitHub Copilot, Codex) and their integrations, including MCP servers, connector permissions, and access management.
- ITIL and project management certifications (e.g., Prince2).
- Advanced knowledge of infrastructure best practices and proactive problem‑solving skills.
- Experience working with Netskope.
- Familiarity with emerging AI infrastructure patterns (agentic tools, MCP, connector-based integrations) and associated access control best practices.
- Excellent communication and team leadership abilities.
- Hands‑on experience with Netskope CASB/SSE, including SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design, and SCIM-based provisioning to support enterprise cloud security.
- Monthly Bulk Bank Benefits Allowance
- A day off to celebrate your Birthday
- PerkBox Subscription
- 60% discount on all Bulk™ products
- Flexi Start
- Additional Annual Leave (optional)
- Teammate Pension Scheme
- Life Assurance
- Medicash
- A day off for Volunteering (optional)
- Cycle to Work Scheme
- Enhanced Maternity & Paternity leaveandworkplace nursery scheme
- Bulk™ Pantry
- Happy Hour Drinks Fridge (Thursdays & Fridays)
- Summer Working Hours
Colchester, UK
HYBRID: 3 days in the office, 2 days working from home
Bulk™ is a place where employees have a voice fundamental to our success as a business. Building a diverse and inclusive team enables us to reach and connect with our global customers, from developing delicious recipes to how our brand is built and perceived.
Regardless of age, disability, race, gender, religion, sexual orientation, education, neurodiversity or any protected characteristic, if you are a passionate risk‑taker and eager to make a difference in sports nutrition, we want to hear from you.We know that a CV doesn’t begin to scratch the surface, and that the things that make you who you are could be a real game‑changer for us. We are proud to be an equal opportunities employer.
Bulk™ takes your privacy seriously and will only use your personal information to administer your application for this role. When you apply, we shall process your details for this vacancy only and we will not pass your details onto a third party. We may contact you by email, text or telephone about the progress of your application. This processing is conducted lawfully on the basis of legitimate interests.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
