Security Engineer

Burns Sheehan; Greater London; Hybrid; GBP 75,000 - 90,000; Full time

Job summary

Burns Sheehan is partnering with a growing international business to hire a Lead Security Engineer to join a small but highly visible security function. This is a hands‑on, delivery‑focused role building and improving security controls across a complex IT estate.

The environment is evolving; you will work closely with infrastructure, engineering, and operations teams to shape the security roadmap while remaining technically involved. Hybrid role with 1 day onsite per week in London.

Qualifications

• Design and implement security controls across infrastructure, identity, endpoint, network, and SaaS.
• Lead asset visibility, application discovery, and ownership programs.
• Drive zero trust and identity-aware access controls.
• Improve identity lifecycle management and access governance.

Responsibilities

• Designing and implementing security controls across infrastructure, identity, endpoint, network, and SaaS environments
• Leading initiatives around asset visibility, application discovery, and ownership tracking
• Driving zero trust and identity‑aware access controls
• Improving identity lifecycle management and access governance
• Working with SIEM, EDR, and vulnerability tooling to improve detection quality and reduce alert noise

Skills

Security engineering

Zero Trust

IAM

SSO

SIEM

EDR

Asset visibility

Vulnerability management

Microsoft environments

Tools

Entra ID

SIEM tools

EDR tools

Job description

Lead Security Engineer | £77,000 + Benefits | Hybrid - x1 day per Week onsite (London)

Here at Burns Sheehan, we are working with a growing international business as they look for a Lead Security Engineer to join a small but highly visible security function. This is a hands‑on engineering role focused on building and improving security controls across a complex IT estate, rather than sitting purely in monitoring or governance.

The environment is evolving, so this would suit someone comfortable working in a business where not everything is fully mature yet. There’s a strong focus on practical delivery, improving visibility, reducing risk, and implementing controls that genuinely improve day-to-day security operations.

You’ll work closely with infrastructure, engineering, and operational teams, helping shape the security roadmap while remaining technically involved.

What you’ll be doing:

• Designing and implementing security controls across infrastructure, identity, endpoint, network, and SaaS environments
• Leading initiatives around asset visibility, application discovery, and ownership tracking
• Driving zero trust and identity‑aware access controls
• Improving identity lifecycle management and access governance
• Working with SIEM, EDR, and vulnerability tooling to improve detection quality and reduce alert noise

What they’re looking for:

• Strong infrastructure or networking background with progression into security engineering
• Hands‑on experience implementing Zero Trust, SSO, IAM, and security controls from scratch
• Experience with Entra ID, SIEM/EDR platforms, vulnerability management, and asset visibility programmes
• Good understanding of Microsoft environments, endpoint security, and SaaS‑heavy estates
• Comfortable operating autonomously in a lean, fast‑moving environment where priorities evolve quickly