Lead Security Engineer

Burns Sheehan Limited; Greater London; Hybrid; GBP 66,000 - 88,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Burns Sheehan Limited is seeking a Lead Security Engineer to join a growing international business. This hands-on role focuses on building and improving security controls across a complex IT estate, rather than pure monitoring or governance.

You will work with infrastructure, engineering and operations teams to shape the security roadmap while staying technically involved, in a hybrid setup with one day a week onsite in London.

Qualifications

• Strong infra or networking background progressing into security engineering.
• Hands-on with Zero Trust, SSO, IAM, and security controls from scratch.
• Experience with Entra ID, SIEM/EDR platforms, vulnerability management, and asset visibility programs.
• Good understanding of Microsoft environments, endpoint security, SaaS-heavy estates.
• Able to operate autonomously in a lean, fast-moving environment where priorities evolve quickly.

Responsibilities

• Design and implement security controls across infrastructure, identity, endpoint, network, and SaaS environments.
• Leading initiatives around asset visibility, application discovery, and ownership tracking.
• Driving zero trust and identity-aware access controls.
• Improving identity lifecycle management and access governance.
• Working with SIEM, EDR, and vulnerability tooling to improve detection quality and reduce alert noise.

Skills

Infrastructure

Security engineering

Zero Trust

SSO

IAM

Entra ID

SIEM/EDR

Vulnerability mgmt

Asset visibility

Microsoft

Endpoint security

SaaS env

Autonomous

Job description

Lead Security Engineer | £77,000 + Benefits | Hybrid - x1 day per Week onsite (London)

Here at Burns Sheehan, we are working with a growing international business as they look for a Lead Security Engineerto join a small but highly visible security function. This is a hands-on engineering role focused on building and improving security controls across a complex IT estate, rather than sitting purely in monitoring or governance.

The environment is evolving, so this would suit someone comfortable working in a business where not everything is fully mature yet. There's a strong focus on practical delivery, improving visibility, reducing risk, and implementing controls that genuinely improve day-to-day security operations.

You'll work closely with infrastructure, engineering, and operational teams, helping shape the security roadmap while remaining technically involved.

What you'll be doing:

• Designing and implementing security controls across infrastructure, identity, endpoint, network, and SaaS environments
• Leading initiatives around asset visibility, application discovery, and ownership tracking
• Driving zero trust and identity-aware access controls
• Improving identity lifecycle management and access governance
• Working with SIEM, EDR, and vulnerability tooling to improve detection quality and reduce alert noise

What they're looking for:

• Strong infrastructure or networking background with progression into security engineering
• Hands-on experience implementing Zero Trust, SSO, IAM, and security controls from scratch
• Experience with Entra ID, SIEM/EDR platforms, vulnerability management, and asset visibility programmes
• Good understanding of Microsoft environments, endpoint security, and SaaS-heavy estates
• Comfortable operating autonomously in a lean, fast-moving environment where priorities evolve quickly

Burns Sheehan Ltd will consider applications based only on skills and ability and will not discriminate on any grounds.