Security Engineer

SCG Connected; Dummer; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

25 Days Holiday

Birthday Day Off

Buy Holiday Scheme

Career Development and Progression Opp

Employee Assistance Programme

Enhanced Company Sick Pay

Discounted Retail Vouchers

Reduced Gym Membership

SCG Mobile Benefit

Employee Referral Bonus

Annual Salary Reviews

Pension Scheme

Onsite Canteen (free croissants and)

Free On-Site Parking

Charity Events

Job summary

SCG Connected is seeking a dedicated Security Specialist to protect IT systems and data by implementing, managing and monitoring controls, and responding to incidents. The role covers vulnerability management, endpoint protection, identity and access management, and auditing against ISO27001 and Cyber Essentials frameworks.

The ideal candidate will lead incident response, threat intelligence activities, and collaborate with third-party auditors to ensure accreditation compliance.

Qualifications

• Strong technical knowledge of security tools, frameworks and best practices.
• Experience with penetration testing and vulnerability management processes.
• Understanding of endpoint protection technologies and policies.
• Knowledge of identity and access management principles.
• Familiarity with ISO27001, CyberEssentials and CyberEssentials+ requirements.

Responsibilities

• Manage ticket workload within the Security team.
• Gather, analyse and act on threat intelligence.
• Respond to ongoing security incidents and active alerts.
• Write change management requests for security-related changes.
• Conduct penetration testing and track corrective actions.
• Resolve vulnerabilities in the infrastructure and EUC estate.
• Define and manage endpoint protection policies.
• Manage IAM service configurations.
• Ensure ISO27001 and Cyber Essentials compliance and audits.

Skills

Threat intelligence

Incident response

Penetration testing

Vulnerability management

Endpoint protection

IAM principles

Security accreditations

Communication skills

Job description

The purpose of this role is to protect the organisation's IT systems and data through implementing, managing and monitoring security controls, responding to security incidents, and ensuring compliance with security accreditations.

Responsibilities:

Security Operations & Incident Management:

• Managing ticket workload within the Security team.
• Gathering, analysing and acting upon threat intelligence.
• Responding to on-going security incidents.
• Responding to active alerts from security systems.
• Writing change management requests for security-related changes.

Vulnerability & Endpoint Management:

• Conducting penetration testing and tracking corrective actions.
• Resolving vulnerabilities in the infrastructure and EUC estate.
• Defining and managing the configuration of endpoint protection policies.
• Managing the configuration of Identity and Access Management services.

Accreditation & Compliance:

• Writing and ratifying policies and ensuring compliance with the Information Security Management System (ISO27001).
• Ensuring compliance with CyberEssentials and CyberEssentials+ requirements and carrying out audits.
• Ensuring compliance with accreditation policies through auditing with external 3rd party auditors.

Skills Required:

• Strong technical knowledge of security tools, frameworks and best practices.
• Experience with penetration testing and vulnerability management processes.
• Understanding of endpoint protection technologies and policies.
• Knowledge of identity and access management principles.
• Familiarity with security accreditations such as ISO27001, CyberEssentials and CyberEssentials+.
• Excellent incident response and threat intelligence skills.
• Strong communication skills to convey security matters to technical and non-technical audiences.
• 25 Days Holiday
• Birthday Day Off
• Buy Holiday Scheme
• Career Development and Progression Opportunities
• Employee Assistance Programme
• Enhanced Company Sick Pay
• Discounted Retail Vouchers
• Reduced Gym Membership
• SCG Mobile Benefit
• Employee Referral Bonus
• Annual Salary Reviews
• Pension Scheme
• Onsite Canteen (offering free croissants and free freshly made soup daily)
• Free On-Site Parking
• Charity Events

SCG is proud to be an equal opportunities employer.

We welcome applications from all parts of the community and are committed to upholding the principles of the Equality Act 2010.

We are committed to supporting applicants with disabilities. We will endeavour to make necessary adjustments to ensure a fair and accessible recruitment process.