Senior Cyber Security Engineer

Experis UK; Manchester; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Hybrid work

Manchester office

Bonus

Benefits

Job summary

Experis UK is partnering with a UK-based organisation to strengthen cyber security capabilities across its web platforms and Azure cloud environment. The role is hybrid, with weekly office presence in Manchester.

We seek a Senior Cyber Security Engineer to own the organisation's security posture, embed security best practices, and drive secure-by-design across applications, APIs, and infrastructure. This permanent role offers up to £60k annual pay plus performance bonus and a comprehensive

Qualifications

• Hands-on cyber security engineering or security architecture experience.
• Strong Azure security skills including Defender for Cloud and Entra ID.
• Practical WAF management using Cloudflare or Akamai.
• Solid knowledge of web/API security and OWASP Top 10.
• Experience with identity governance and conditional access.
• Familiarity with Agile/DevOps environments and security integration.

Responsibilities

• Own and enhance security posture of Azure, web estate, and identity platforms.
• Manage and optimise WAF technologies (Cloudflare, Akamai).
• Lead web ingress controls and DDoS protection and certificate management.
• Embed secure-by-design across applications, APIs, infrastructure.
• Promote shift-left security in DevOps and CI/CD.
• Coordinate with security partners and drive incident response.
• Oversee Entra ID security controls and access governance.
• Define security standards and governance for scalable delivery.

Skills

Cyber security engineering

Security architecture

Azure security

WAF management

Identity governance

DevOps security

DDoS protection

Conditional Access

Stakeholder management

Tools

Cloudflare

Akamai

Microsoft Defender for Cloud

Entra ID / Azure AD

Job description

Hybrid: Once a week in the office (Manchester)

Permanent Paying up to £60k + bonus + benefits

Experis are partnering with a UK organisation, as they continue to strengthen their cyber security capabilities in support of a growing digital estate and cloud-first technology strategy.

We are supporting them in the search for an experienced Senior Cyber Security Engineer to take ownership of the organisation's security posture across its web platforms, Azure cloud environment, identity services, and emerging AI capabilities.

This is a highly influential technical role sitting at the intersection of infrastructure, engineering, and digital delivery teams. The successful candidate will play a critical role in securing technology landscape by embedding security best practices, strengthening controls, and ensuring security is built into everything the organisation develops and operates.

What You'll Be Doing

• Owning and enhancing the security posture of Azure cloud environment, web estate, and identity platforms
• Managing and optimising web application firewall (WAF) technologies including Cloudflare and Akamai to protect against evolving threats
• Leading the implementation and continuous improvement of web ingress controls including DDoS protection, certificate management, and traffic security
• Working closely with development and engineering teams to embed secure-by-design principles across applications, APIs, and infrastructure
• Driving adoption of security best practices within DevOps and CI/CD environments through shift-left security initiatives
• Managing Microsoft Defender for Cloud and proactively identifying, assessing, and remediating security risks across the estate
• Owning Entra ID security controls including Conditional Access, identity governance, access reviews, and privileged access management
• Defining security standards, patterns, and governance frameworks that enable secure and scalable technology delivery
• Acting as the primary technical security contact for Arctic Wolf and other security partners, coordinating investigations and response activities
• Supporting the secure adoption of AI technologies through the development of appropriate controls, guardrails, and risk management frameworks
• Participating in architecture and design reviews, ensuring security considerations are embedded from the outset
• Monitoring emerging threats and translating security intelligence into practical improvements across the business

Experience Required

• Proven experience in a hands-on Cyber Security Engineering or Security Architecture role
• Strong experience securing Azure environments, including Microsoft Defender for Cloud and Entra ID
• Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms
• Strong understanding of web application security, API security, and OWASP Top 10 vulnerabilities
• Experience implementing identity and access management controls, including Conditional Access and identity governance
• Experience working within Agile, DevOps, or platform engineering environments
• Solid understanding of cloud security principles, network security, and least-privilege access models
• Experience engaging with security operations, MDR, or SOC providers to manage incidents and improve security controls
• Knowledge of AI and Large Language Model (LLM) security risks would be highly advantageous
• Excellent stakeholder management and communication skills, with the ability to explain technical risks to both technical and non-technical audiences
• Experience within healthcare, dental, or other regulated industries would be beneficial

What We're Looking For

• A pragmatic security professional who enables innovation while effectively managing risk
• A collaborative individual who builds strong relationships across engineering, infrastructure, and product teams
• Someone who can balance technical depth with commercial awareness
• A security champion who remains curious about emerging threats and evolving technologies
• An individual who embodies values of Respecting Each Other, Achieving as One, and Growing Together