Security Engineer: Incident Response, Threat Intel & ISO27001

SCG Connected; Dummer; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

25 Days Holiday

Birthday Day Off

Buy Holiday Scheme

Career Development and Progression Opp

Employee Assistance Programme

Enhanced Company Sick Pay

Discounted Retail Vouchers

Reduced Gym Membership

SCG Mobile Benefit

Employee Referral Bonus

Annual Salary Reviews

Pension Scheme

Onsite Canteen (free croissants and)

Free On-Site Parking

Charity Events

Job summary

SCG Connected is seeking a dedicated Security Specialist to protect IT systems and data by implementing, managing and monitoring controls, and responding to incidents. The role covers vulnerability management, endpoint protection, identity and access management, and auditing against ISO27001 and Cyber Essentials frameworks.

The ideal candidate will lead incident response, threat intelligence activities, and collaborate with third-party auditors to ensure accreditation compliance.

Qualifications

• Strong technical knowledge of security tools, frameworks and best practices.
• Experience with penetration testing and vulnerability management processes.
• Understanding of endpoint protection technologies and policies.
• Knowledge of identity and access management principles.
• Familiarity with ISO27001, CyberEssentials and CyberEssentials+ requirements.

Responsibilities

• Manage ticket workload within the Security team.
• Gather, analyse and act on threat intelligence.
• Respond to ongoing security incidents and active alerts.
• Write change management requests for security-related changes.
• Conduct penetration testing and track corrective actions.
• Resolve vulnerabilities in the infrastructure and EUC estate.
• Define and manage endpoint protection policies.
• Manage IAM service configurations.
• Ensure ISO27001 and Cyber Essentials compliance and audits.

Skills

Threat intelligence

Incident response

Penetration testing

Vulnerability management

Endpoint protection

IAM principles

Security accreditations

Communication skills

Job description

SCG Connected is seeking a dedicated Security Specialist to protect IT systems and data by implementing, managing and monitoring controls, and responding to incidents. The role covers vulnerability management, endpoint protection, identity and access management, and auditing against ISO27001 and Cyber Essentials frameworks.

The ideal candidate will lead incident response, threat intelligence activities, and collaborate with third-party auditors to ensure accreditation compliance.