Security Engineer

Damia Group; England; On-site; GBP 100,000 - 125,000; Full time

Job summary

An SME consultancy in the UK is seeking a full-time Security Engineer to work onsite in Hampshire. The role will involve documenting security configurations, managing vulnerabilities, and deploying security tools. Applicants should possess knowledge of SIEM tooling and CI/CD tools, as well as an understanding of threat frameworks. Previous experience in the defence sector is advantageous. The position offers £425-£525 per day and requires candidates to be Security Cleared prior to appointment.

Qualifications

• Knowledge of configuring SIEM tooling.
• High standards in written report and/or design documentation.
• Basic understanding of threat frameworks, such as ATT&CK.

Responsibilities

• Documenting security configuration.
• Proactive management of technical vulnerabilities.
• Deployment of security tooling (e.g. vulnerability scanning, SIEM).
• Development of alerts and dashboards in SIEM configuration.
• Deploying secure lockdowns to information systems.
• Assist 2nd line Security Analysts in triaging critical incidents.

Skills

Knowledge of configuring SIEM tooling

Understanding of CI/CD tools

Basic understanding of threat frameworks

Tools

Elastic Security SIEM

Nessus/Tenable

Kubernetes

Job description

Security Engineer - Hampshire (full time onsite) - £425-£525 per day outside ir35 - 3 months rolling

Please note: Due to the nature of the project, successful applicants will be required to be Security Cleared prior to appointment.

My client is an SME consultancy, specialising within the defence and security sector. They are looking for a Security Engineer to work with the Security Lead and technical teams to secure the solution.

Key Responsibilities and Tasks

• Documenting security configuration
• Proactive management of technical vulnerabilities
• Deployment of security tooling (vulnerability scanning/SIEM/etc).
• Development of alerts and dashboards in SIEM configuration.
• Deploying secure lockdowns to information systems.
• Assist 2nd line Security Analysts in triaging critical incidents.

Experience (Essential)

• Knowledge of configuring SIEM tooling.
• Basic understanding of threat frameworks, such as ATT&CK.
• Understanding of CI/CD tools required to secure a pipeline.
• High standards in written report and/or design documentation.

Experience (Nice to have)

• Experience of supporting information systems in a government or defence sector
• Development of SOC Use Cases and Playbooks
• Hands‑on experience of configuring CI/CD tools and Kubernetes
• Knowledge of MOD policies (e.g. JSP 440)
• Experience with Elastic Security SIEM, Nessus/Tenable
• Experience of working with MOD Assurance.