Security Engineer - PAM & Identity Security (Defence)

Talent Locker; Farnborough; Hybrid; GBP 75,000 - 80,000; Full time

Benefits offered by this job

Hybrid work arrangement

Bonus

Benefits package

Job summary

Talent Locker in Farnborough is seeking a hands-on Security Engineer for a Defence/National Security environment. This hybrid role (3 days on site) focuses on privileged access management, identity security and security tooling across critical infrastructure.

You'll maintain and improve security platforms controlling credentials, RBAC, and authentication events, with Elastic SIEM experience as a strong advantage.

Qualifications

• Hands-on security engineering within complex environments.
• PAM or identity security solutions experience.
• Active Directory, identity providers, privileged/service accounts.
• Vulnerability scanning, EDR or SIEM tooling.
• Elastic SIEM experience is a strong advantage.
• Understanding of RBAC and credential management.

Responsibilities

• Manage passwords, SSH keys, API keys and privileged credentials.
• Configure and troubleshoot automated password and credential rotation.
• Run discovery scans across Active Directory and network environments.
• Manage RBAC, permissions and user/group access.
• Monitor privileged sessions and investigate failed authentication activity.
• Maintain, patch, and upgrade security platforms.
• Review audit logs and integrate security events with SIEM tooling.
• Troubleshoot firewalls, load balancers and connectivity issues.

Skills

Hands-on Security Engineering

Privileged Access Management (PAM)

Identity security solutions

Active Directory

RBAC

Vulnerability scanning

EDR

SIEM tooling

Elastic SIEM

Job description

Talent Locker in Farnborough is seeking a hands-on Security Engineer for a Defence/National Security environment. This hybrid role (3 days on site) focuses on privileged access management, identity security and security tooling across critical infrastructure.

You'll maintain and improve security platforms controlling credentials, RBAC, and authentication events, with Elastic SIEM experience as a strong advantage.