Security Engineer

GBV Ltd; Preston; On-site; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Bonus

Benefits

Job summary

GBV Ltd in Preston, UK is seeking a hands-on Security Engineer to design, implement and continuously improve security controls across cloud, identity, endpoints and applications within a large infrastructure estate.

You’ll join a 24x7 SOC-aligned security function supporting thousands of colleagues globally, with responsibilities spanning vulnerability remediation, incident response, threat-hunting and security monitoring using Microsoft Sentinel, Purview, Defender XDR and related tools.

Qualifications

• Hands-on security engineering role in cloud, identity, endpoint, network and app security.
• Experience building, hardening and improving security controls.
• Strong understanding of vulnerability remediation and security monitoring.
• Experience working with a 24x7 SOC or MDR environment.
• Familiarity with frameworks such as CAF, NIS2, ISO 27001/27701/22301.

Responsibilities

• Design, configure and harden security controls across cloud, servers, endpoints, identity and business apps.
• Establish secure baselines using CIS/Microsoft baselines.
• Engineer identity controls including MFA and least privilege.
• Maintain controls with Defender XDR, Sentinel, Intune, Entra ID and Purview.
• Support incident response, investigations and tabletop exercises.

Skills

Security Engineering

Incident response

Threat hunting

Logging & monitoring

Automation/ scripting

Tools

Microsoft Sentinel

Microsoft Purview

Qualys/Tenable

Microsoft Defender XDR

Intune

Entra ID

Azure AD/ Identity

PowerShell

KQL

MITRE ATT&CK

Job description

Security Engineer | £60,000 + Bonus + Benefits | Preston

Are you a hands-on Security Engineer who enjoys building, hardening and improving security controls, rather than simply monitoring alerts and passing issues elsewhere?

We're recruiting for a rapidly growing, international infrastructure organisation looking to strengthen its internal Cyber Security capability with an experienced Security Engineer.

You’ll be joining a sizeable technology and security function supporting approximately 6,000 colleagues across 125+ locations spanning the UK, Australia and United States.

This is a genuinely hands‑on engineering position where you’ll work across cloud, identity, endpoint, network and application security, helping engineer vulnerabilities and weaknesses out of the environment.

The Role

Working closely with Security Operations, IAM, Cloud & Infrastructure, Service Operations and Application teams, you’ll help design, configure and continuously improve the technical controls protecting a large and complex digital estate.

You’ll also work alongside a 24x7 managed SOC, with the internal Security Engineering team responsible for building, tuning and maintaining the controls that underpin the wider security operation.

Your responsibilities will include:

• Designing, configuring and hardening security controls across cloud, servers, endpoints, identity, networks and business applications.
• Establishing secure configuration baselines using CIS Benchmarks and Microsoft security baselines.
• Engineering identity controls across MFA, Conditional Access, privileged access and least privilege.
• Building and maintaining controls across Microsoft Defender XDR, Sentinel, Intune, Entra ID and Purview.
• Working with Cloud, Infrastructure and Application teams to embed security-by-design.
• Improving logging, monitoring and alerting.
• Supporting vulnerability remediation across a complex technology estate.
• Implementing improvements identified through penetration testing, audits and security assessments.
• Providing hands‑on engineering support during security incidents.
• Contributing to incident simulations and tabletop exercises.
• Developing automation and repeatable engineering processes using PowerShell, KQL and other scripting technologies.

Security Tooling

You’ll be working across a broad modern security ecosystem, with technologies including:

A key part of the position will be tuning and improving these controls, increasing signal quality and reducing unnecessary operational noise for Security Operations and the external SOC.

What We're Looking For

We’re looking for somebody with around 3+ years' experience in a hands‑on Security Engineering, Cyber Security Engineering, Infrastructure Security or Cloud Security position.

You’ll ideally bring strong experience across:

• Microsoft Sentinel
• Microsoft Purview
• Vulnerability management – Qualys, Tenable or similar
• Cloud, server and endpoint hardening
• CIS / Microsoft / NCSC security baselines
• IAM and Conditional Access
• Privileged Access / Least Privilege
• Incident response and remediation
• Security monitoring and logging
• Working alongside Infrastructure, Cloud and wider Engineering teams.

You also need enough understanding of frameworks such as CAF, NIS2, ISO 27001, ISO 27701 and ISO 22301 to translate security requirements into practical technical controls.

Nice to Have

Additional experience in any of the following would be highly advantageous:

AZ-500 / SC-200 / SC-300 / MS-102 / Security+

MITRE ATT&CK / Detection Engineering / Threat Hunting

PowerShell / KQL / Python

24x7 SOC or MDR environments

Critical National Infrastructure, Utilities, Energy, Telecoms or Water

Why Join?

This is an opportunity to join a business undergoing significant growth and transformation where Cyber Security is receiving serious investment and visibility.

Rather than sitting in a monitoring‑focused role, you’ll have the opportunity to engineer improvements yourself – hardening environments, closing vulnerabilities, improving identity controls, tuning security tooling and working alongside specialist teams to continually strengthen the organisation’s security posture.

You’ll be joining an environment with international scale, modern Microsoft security technologies and plenty of complex technical challenges.

Package

Additional Benefits