Lead IT Security Engineer

Oceanic Catering; Glasgow; On-site; GBP 60,000 - 90,000; Full time

Job summary

Oceanic Catering is seeking a seasoned cybersecurity professional to lead the enterprise security program. You will drive cyber risk reduction, oversee the security stack, and ensure compliant processes across all systems.

You will collaborate with partners, lead a security team, and coordinate with the IT Service Desk on incidents. A strong background in cloud platforms, AD, scripting, and vulnerability management is essential.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cyber Security or related STEM field or technical qualification.
• 5+ years in IT with 4–5 years in cybersecurity.
• Experience implementing security solutions, incident responses and leading security projects.
• Cloud platforms (AWS/Azure/GCP) and network security fundamentals are essential.
• AD/Azure AD and conditional access policies, security tooling experience, scripting (Python/PowerShell/Bash).

Responsibilities

• Develop, plan and implement projects to improve cyber security and protect the business.
• Manage the security stack and reporting framework for critical systems.
• Ensure documentation and support processes are compliant and reviewed.
• Manage relationships with security partners and clients.
• Collaborate with IT Service Desk to complete incident/problem management.
• Lead and coach the security team and ensure proper processes are followed.
• Develop Disaster Recovery and Business Continuity plans.
• Serve as senior cyber incidents contact and incident manager when needed.
• Review security best practices and apply to network infrastructure.
• Maintain Cyber Essentials Plus certification.
• Oversee penetration testing and remediation; manage patch cycles.
• Perform vulnerability testing of group applications and websites.

Skills

AWS

Azure

GCP

Active Directory

Azure AD

Conditional access

Python

PowerShell

Bash

Penetration testing

Patch management

Incident management

Stakeholder management

Education

Bachelor’s degree in Computer Science or related STEM

Job description

Responsibilities

• Develop, plan and implement projects to continually improve cyber security to protect the business, improve services and increase efficiency within the business
• Manage the technical security stack and ensure robust security and reporting framework for all critical systems.
• Ensure that the documentation and support processes are compliant, in place and regularly reviewed for all systems
• Manage internal and external relationships with security partners and clients.
• Work with the IT Service Desk to ensure incident/problem management is completed effectively
• Lead and coach the security team in your area of expertise, ensuring proper processes are in place and followed
• Develop effective Disaster Recovery and Business Continuity plans for the systems under your control
• Senior point of contact on Cyber incidents, taking incident manager role for the duration.
• Review the security best practice guides and ensure they apply to the network infrastructure
• Maintain certification Cyber Essentials Plus
• Penetration test management and remediation management
• Vulnerability testing of applications and websites owned and created by the Group.

Qualifications

• A Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related STEM field or relevant technical qualification
• 5+ years in IT, with at least 4-5 years specifically in a cybersecurity role
• Proven experience implementing security solutions, managing incident responses, and leading projects to improve enterprise security posture
  • Proficiency in AWS, Azure, or GCP cloud platforms is essential
  • In depth knowledge of security standards for network, firewalls and Intrusion Detection/prevention systems
• Experience with AD, Entra ID (Azure AD), and conditional access policies
• Hands on experience of a wide range of security tooling required for an enterprise organisation
• Experience using Python, PowerShell, or Bash
• Experience with penetration testing tools and managing patch cycles
• Proven ability to deal with a range of stakeholders within the business, at all levels, and provide appropriate technical security advice
• Proven experience leading an enterprise wide security incident

Certifications

• CompTIA Security+ (or higher, like CASP+), CEH (Certified Ethical Hacker)
• Experience playing a key security role in IT and Business Projects