IT Security Operations Engineer

Nisbets; West of England; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Hybrid working

Office Avonmouth (Fourth Way)

Job summary

Nisbets is seeking an IT Security Operations Engineer to monitor, maintain and improve security controls across our systems. You will investigate threats, respond to incidents and strengthen governance while collaborating with Infrastructure, Applications, Service Management and partners.

The role is hands-on, covering security monitoring, vulnerability management and identity security across endpoints, servers, networks and cloud. Hybrid working is available after initial training.

Qualifications

• Strong foundation in cyber security operations, security monitoring and incident response.
• Experience with security technologies (EDR/XDR, vulnerability management, identity security).
• Ability to produce clear technical documentation and communicate with stakeholders.

Responsibilities

• Monitor security alerts from internal tools and providers.
• Coordinate incident responses and remediation activities.
• Investigate phishing attempts and emerging cyber threats.
• Configure and improve security technologies across the IT estate.
• Support security solutions implementations and risk-based improvements.
• Contribute to ISMS maintenance and security certifications.

Skills

Cyber security operations

Security monitoring

Incident response

Threat detection

Security governance

Clear technical documentation

Prioritising workloads

Tools

EDR/XDR

Job description

IT Security Operations Engineer

Help us keep our systems secure, resilient and trusted

At Nisbets, technology plays a critical role in how we serve our customers and support our colleagues. As our IT Security Operations Engineer, you'll help protect our business by monitoring, maintaining and continuously improving the security controls that keep our systems, data and users safe.

This is a hands-on role where you'll work across a wide range of security technologies, investigating threats, responding to incidents and helping strengthen our overall security posture. Working closely with Infrastructure, Applications, Service Management, project teams and the wider security community, you'll play an important role in safeguarding our technology environment and ensuring compliance with key security standards.

You won't just be responding to alerts. You'll help improve security controls, reduce risk, strengthen governance and contribute to the ongoing development of our cyber security capabilities across the business.

Where you'll work

The role is based at our Fourth Way office in Avonmouth. As a hands-on operational security position, you'll work closely with colleagues across the business and participate in out-of-hours incident response activities when required. hybrid working available following an initial training period.

What you'll get to work on

You'll have the chance to:

• Monitor and investigate security alerts from internal tools and managed security providers.
• Coordinate the response to security incidents, supporting containment, remediation and recovery activities.
• Investigate phishing attempts, suspicious emails and emerging cyber threats.
• Configure, maintain and improve security technologies across our IT estate.
• Support the implementation of new security solutions, controls and enhancements.
• Manage vulnerability scanning activities and work with system owners to remediate findings.
• Support penetration testing and security assessments, ensuring actions are tracked through to completion.
• Help strengthen identity and access management through MFA, least privilege and privileged access controls.
• Contribute to maintaining our Information Security Management System (ISMS) and security certifications.
• Support internal and external audits, providing technical evidence and security expertise.
• Work with suppliers and technology partners to assess and manage security risks.
• Deliver security awareness activities including phishing simulations and colleague education programmes.
• Provide practical security guidance to both technical and non-technical stakeholders.

What you'll bring

We don't expect you to know everything, but you'll need a strong foundation in:

• Cyber security operations, security monitoring and incident response.
• Security technologies such as EDR/XDR, vulnerability management and identity security.
• Endpoint, server, network, cloud and SaaS security concepts.
• Investigating security alerts, vulnerabilities and technical issues.
• Security best practice, risk management and operational security controls.
• Producing clear technical documentation and communicating effectively with a range of stakeholders.
• Prioritising workloads, managing competing demands and working independently when required.

It would be great if you also have experience with:

• ISO 27001 environments and information security governance.
• GDPR, PCI DSS, Cyber Essentials and NCSC guidance.
• Vulnerability management and penetration test remediation.
• Third-party, supplier or cloud security assessments.
• ITIL service management principles.
• Industry certifications such as CompTIA Security+, Microsoft Security, CISSP, CISM or CEH.