Security Engineer III

relx; Oxford; On-site; GBP 70,000 - 110,000; Full time

Job summary

Elsevier’s Security Engineering team is seeking engineers to design, deploy, and operate security solutions across large-scale cloud platforms. You’ll partner with Incident Response, Threat Engineering, GRC, and software teams to ensure secure adoption.

The role emphasizes design, automation, and resilience in AWS environments, with a strong DevOps focus and modern CI/CD practices to protect cloud infrastructure.

Qualifications

• Demonstrated knowledge of IT security tools and cloud computing, including security services in AWS, OCI, or Aliyun.
• Experience with CI/CD pipelines (GitHub Actions).
• Familiarity with AI tools to enhance security outcomes.
• Ability to analyze and monitor security systems using tools such as NewRelic or CloudWatch.
• Proficiency in scripting and/or application development (Python, Shell).
• Experience with security tools such as SIEM, DLP, EDR, Firewalls, IDS/IPS, or code analysis tools.
• Experience with cloud environments (AWS or others), virtualization, containerization, or infrastructure as code.
• Exposure to Agile/DevOps frameworks.

Responsibilities

• Collaborate within the security engineering team to design and implement security tooling.
• Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code (Terraform).
• Create and support CI/CD pipelines using GitHub Actions to enable reliable, automated deployments.
• Collaborate with engineering teams on architecture, reliability, and continuous improvement.
• Partner with software development teams to ensure effective adoption of security tools.
• Implement monitoring, logging, and alerting to improve system reliability and visibility.
• Support resilience through capacity planning, performance tuning, disaster recovery, and runbooks.
• Troubleshoot issues efficiently and communicate outcomes clearly.
• Deliver production-ready systems on time and within budget.

Skills

Cloud security

DevOps

Security tooling

AWS

Terraform

CI/CD

Security operations

Vulnerability management

Incident response

Networking security

Threat engineering

Tools

Terraform

GitHub Actions

NewRelic

CloudWatch

Python

Shell scripting

SIEM

EDR

IDS/IPS

Job description

Are you passionate about building and scaling cloud security tooling using AWS, Terraform, and modern CI/CD practices?

Can you partner with engineering teams to design, deploy, and operate security solutions that protect large‑scale cloud platforms?

About our Team

You'll be joining the Security Engineering team within Elsevier's Information Security & Data Protection department. Our team is responsible for designing, implementing, configuring, and maintaining security tools used across Elsevier Technology. You will collaborate with colleagues from Incident Response, Threat Engineering, Governance Risk & Compliance (GRC), and work closely with business users to ensure our security tools are effectively adopted throughout our cloud infrastructure.

About the Role

We are seeking candidates with a passion for cybersecurity. You should have a solid understanding of security tools, cloud technologies, and DevOps methodologies. We value practical experience applying IT security principles across areas such as Network Security, Security Operations, Vulnerability Management, Risk Management, and Incident Response.

Responsibilities

• Collaborate within the security engineering team to design and implement security tooling.
• Design, build, and maintain AWS cloud infrastructure using Infrastructure as Code (Terraform)
• Create and support CI/CD pipelines using GitHub Actions to enable reliable, automated deployments
• Collaborate with engineering teams on architecture, reliability, and continuous improvement
• Partner with software development teams to ensure effective adoption of security tools.
• Implement monitoring, logging, and alerting to improve system reliability and visibility
• Support resilience through capacity planning, performance tuning, disaster recovery, and runbooks
• Troubleshoot issues efficiently and communicate outcomes clearly.
• Deliver production-ready systems on time and within budget.

Requirements

We recognize that no one will meet every requirement. If you are excited about this role and have relevant experience, we encourage you to apply.

• Demonstrated knowledge of IT security tools and cloud computing, including security services in AWS, Oracle Cloud Infrastructure (OCI), or Aliyun.
• Experience with CI/CD pipelines (e.g., GitHub Actions).
• Familiarity with AI tools (such as GitHub Copilot or ChatGPT Enterprise) to enhance security outcomes.
• Ability to analyze and monitor security systems using tools such as NewRelic or CloudWatch.
• Proficiency in scripting and/or application development (e.g., Python, Shell scripting).
• Experience working with security tools such as SIEM, Data Loss Prevention (DLP), Endpoint Detection & Response (EDR), Firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), or code analysis tools.
• Experience with cloud environments (AWS or others), virtualization, containerization, or infrastructure as code.
• Exposure to Agile and/or DevOps frameworks.
• Interest in emerging industry standards for security in technology environments.

We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits.

We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.

We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.