Security Engineer: Incident Response & Compliance

SCG Midlands; Dummer; On-site; GBP 40,000 - 50,000; Full time

Benefits offered by this job

25 Days Holiday

Birthday Day Off

Pension Scheme

Onsite Parking

Job summary

SCG Midlands is recruiting for a security-focused professional to protect IT systems and data by implementing, managing, and monitoring security controls, and by responding to incidents. The role covers operations, vulnerability management, endpoint protection, and compliance with ISO27001 and CyberEssentials frameworks.

The successful candidate will manage security incidents, handle threat intelligence, and work with Identity and Access Management services while ensuring adherence to

Qualifications

• Strong technical knowledge of security tools, frameworks and best practices.
• Experience with penetration testing and vulnerability management processes.
• Understanding of endpoint protection technologies and policies.
• Knowledge of identity and access management principles.
• Familiarity with ISO27001, CyberEssentials and CyberEssentials+.
• Excellent incident response and threat intelligence skills.
• Strong communication skills to convey security matters to technical and non-technical audiences.

Responsibilities

• Security Operations & Incident Management: Manage ticket workload within the Security team.
• Threat intelligence: Gather, analyse and act on threat intel.
• Incident response: Respond to ongoing security incidents and active alerts.
• Change management: Write change requests for security-related changes.

Skills

Security tools

Penetration testing

Vulnerability management

Endpoint protection

Identity & access management

ISO27001 knowledge

CyberEssentials

Incident response

Threat intelligence

Communication skills

Job description

SCG Midlands is recruiting for a security-focused professional to protect IT systems and data by implementing, managing, and monitoring security controls, and by responding to incidents. The role covers operations, vulnerability management, endpoint protection, and compliance with ISO27001 and CyberEssentials frameworks.

The successful candidate will manage security incidents, handle threat intelligence, and work with Identity and Access Management services while ensuring adherence to