Security Engineering Lead

THG Ingenuity; Manchester; On-site; GBP 75,000 - 95,000; Full time

Job summary

THG Ingenuity is seeking a Security Engineering Lead to oversee security tooling and manage a skilled team in our Manchester HQ. The role focuses on setting technical direction, enhancing automation, and integrating AI into security solutions.

This position demands substantial experience in areas like Infrastructure as Code, cloud security, and effective communication with both technical and non-technical audiences. The ideal candidate will be proactive and dedicated to creating a secure environment.

Qualifications

• Experience in security engineering or related roles.
• Substantial Infrastructure as Code experience managing security tooling.
• Practical experience applying AI within security workflows.

Responsibilities

• Lead a team of security engineers.
• Own the design and operation of security tooling.
• Collaborate with external stakeholders and partners.

Skills

Security engineering

AI application

Infrastructure as Code

Cloud security

CI/CD security

Effective communication

Education

Bachelor's degree in Computer Science or Information Security

Certifications such as CISSP or CISM

Tools

SIEM

SOAR

GitHub

Terraform

AWS

GCP

Azure

Job description

Security Engineering Lead

Location: Based onsite at our HQ in Manchester (WA15 0AF)

Reports to: Deputy Chief Security Officer

Team: Leads a team of 3 to 4 Security Engineers

Type: Permanent, full-time

About the Role: We are seeking a Security Engineering Lead to take ownership of our security tooling and lead a dedicated team of engineers. You will set the technical direction for the function, manage and develop the team, and remain hands‑on to make sound decisions on architecture and design. Our security tooling is managed entirely as Infrastructure as Code, so the role demands fluency in repositories, pipelines, and security platforms. Candidates who can apply AI to practical effect are highly desirable. The role partners closely with the wider security function, engineering, and the business, and engages directly with external parties, including vendors, auditors, and partners.

Key Responsibilities

• Lead a team of 3 to 4 security engineers, setting standards, overseeing delivery, and supporting their development.
• Own the design, implementation, and operation of our security tooling, managed entirely as code.
• Advance automation across detection, response, and access tooling to reduce manual effort and improve consistency.
• Define the technical roadmap for security tooling and keep it aligned with engineering and business priorities.
• Apply AI to strengthen detection, triage, and automation to improve team effectiveness.
• Lead the engineering aspects of incident response and manage escalations for the tooling your team owns; participate in an on‑call and out‑of‑hours rota.
• Collaborate with other security teams (SOC, GRC, AppSec, vulnerability management) and with platform and engineering teams to embed security from the outset.
• Represent security engineering to external stakeholders, including vendors, auditors, and partners.

Security Stack

• Detection and response: SIEM, SOAR, EDR
• Network and web: Secure Web Gateway (SWG), DLP
• Access: Zero Trust Access, IAM
• Cloud: AWS, GCP, Azure
• Email: Secure Email Gateway
• Pipelines: GitHub (CI/CD security, secrets, supply‑chain controls)

Essential Skills And Experience

• Experience in security engineering or related roles.
• Strong hands‑on experience across several areas, such as SIEM/SOAR, Zero Trust access, IAM, DLP, and EDR.
• Experience securing cloud environments such as AWS, GCP, or Azure.
• Skilled in planning, designing, and implementing enterprise‑level security solutions.
• Substantial Infrastructure as Code experience (e.g., Terraform) managing security tooling declaratively and under version control.
• Experience securing CI/CD pipelines, ideally GitHub, including Actions, secrets management, and supply‑chain security.
• Practical experience applying AI within security workflows or tooling.
• A demonstrable record of working across teams, both within security and alongside engineering and external stakeholders.
• A clear communicator, able to convey technical risk to both engineering and non‑technical audiences.
• Knowledge of industry best practice and frameworks such as ISO 27001, IEC 62443, NIST Cyber Security Framework, CIS Critical Security Controls, and MITRE ATT&CK.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Certifications such as CISSP, CISM, or similar.

Desirable

• Experience leading or line‑managing a security team.
• Scripting or development experience (Python, Go, or similar) for automation.
• Experience in a regulated or e‑commerce environment, including PCI DSS and Cyber Essentials Plus.
• Detection engineering or threat‑hunting experience.
• Container and Kubernetes security experience.
• Experience presenting to and reporting to senior leadership.
• Further cloud security certifications, such as AWS, GCP, or Azure security specialties.

THG Ingenuity is proud to be a Disability Confident Committed employer. If you are invited to interview, please let us know if there are any reasonable adjustments we can make to the recruitment process that will enable you to perform to the best of your ability.

THG Ingenuity is committed to creating a diverse & inclusive environment and welcomes applications from all sections of the community.