Senior Cyber Security Engineer

Experis - ManpowerGroup; Manchester; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Bonus

Benefits package

Hybrid work

Job summary

Experis - ManpowerGroup is seeking a Senior Cyber Security Engineer for a hybrid role based in Manchester, with one day per week in the office. The position is permanent and offers up to £60k plus bonus and benefits.

You will own security across Azure, web estate, identity platforms, and emerging AI capabilities, partnering with DevOps and product teams to embed secure-by-design practices and strengthen controls across the estate.

Qualifications

• Proven hands-on cyber security engineering or security architecture experience
• Strong Azure security experience with Defender for Cloud and Entra ID
• Experience managing WAFs like Cloudflare or Akamai
• Solid understanding of web app security and OWASP Top 10
• Experience IAM controls including Conditional Access and identity governance
• Experience in Agile/DevOps/platform engineering
• Knowledge of cloud/network security and least-privilege
• Experience with MDR/SOC providers for incidents
• Knowledge of AI/LLM security risks advantageous
• Excellent stakeholder management and communication skills
• Experience in regulated industries beneficial

Responsibilities

• Own and enhance security posture of Azure cloud, web estate, and identity platforms
• Manage and optimise WAF technologies (Cloudflare, Akamai)
• Lead ingress controls with DDoS protection and certificate management
• Embed secure-by-design principles across apps, APIs, and infrastructure
• Drive shift-left security in DevOps/CI/CD environments
• Manage Defender for Cloud and remediate risks across the estate
• Own Entra ID security controls including Conditional Access
• Define security standards and governance frameworks
• Coordinate with Arctic Wolf and other security partners
• Support secure adoption of AI technologies with appropriate controls
• Participate in architecture reviews and security design reviews
• Monitor emerging threats and translate into practical improvements

Skills

Azure security

WAF management

DevSecOps

Identity management

Conditional Access

Entra ID

Defender for Cloud

DDoS protection

Threat monitoring

Security architecture

Cloud security

OWASP Top 10

MDR/SOC

Tools

Cloudflare

Akamai

Microsoft Defender for Cloud

Azure AD

Job description

Senior Cyber Security Engineer

Hybrid: Once a week in the office (Manchester)

Permanent

Paying up to £60k + bonus + benefits

Experis are partnering with a UK organisation, as they continue to strengthen their cyber security capabilities in support of a growing digital estate and cloud-first technology strategy.

We are supporting them in the search for an experienced Senior Cyber Security Engineer to take ownership of the organisation's security posture across its web platforms, Azure cloud environment, identity services, and emerging AI capabilities.

This is a highly influential technical role sitting at the intersection of infrastructure, engineering, and digital delivery teams. The successful candidate will play a critical role in securing technology landscape by embedding security best practices, strengthening controls, and ensuring security is built into everything the organisation develops and operates.

What You'll Be Doing

• Owning and enhancing the security posture of Azure cloud environment, web estate, and identity platforms
• Managing and optimising web application firewall (WAF) technologies including Cloudflare and Akamai to protect against evolving threats
• Leading the implementation and continuous improvement of web ingress controls including DDoS protection, certificate management, and traffic security
• Working closely with development and engineering teams to embed secure-by-design principles across applications, APIs, and infrastructure
• Driving adoption of security best practices within DevOps and CI/CD environments through shift-left security initiatives
• Managing Microsoft Defender for Cloud and proactively identifying, assessing, and remediating security risks across the estate
• Owning Entra ID security controls including Conditional Access, identity governance, access reviews, and privileged access management
• Defining security standards, patterns, and governance frameworks that enable secure and scalable technology delivery
• Acting as the primary technical security contact for Arctic Wolf and other security partners, coordinating investigations and response activities
• Supporting the secure adoption of AI technologies through the development of appropriate controls, guardrails, and risk management frameworks
• Participating in architecture and design reviews, ensuring security considerations are embedded from the outset
• Monitoring emerging threats and translating security intelligence into practical improvements across the business

Experience Required

• Proven experience in a hands-on Cyber Security Engineering or Security Architecture role
• Strong experience securing Azure environments, including Microsoft Defender for Cloud and Entra ID
• Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms
• Strong understanding of web application security, API security, and OWASP Top 10 vulnerabilities
• Experience implementing identity and access management controls, including Conditional Access and identity governance
• Experience working within Agile, DevOps, or platform engineering environments
• Solid understanding of cloud security principles, network security, and least-privilege access models
• Experience engaging with security operations, MDR, or SOC providers to manage incidents and improve security controls
• Knowledge of AI and Large Language Model (LLM) security risks would be highly advantageous
• Excellent stakeholder management and communication skills, with the ability to explain technical risks to both technical and non-technical audiences
• Experience within healthcare, dental, or other regulated industries would be beneficial

What We're Looking For

• A pragmatic security professional who enables innovation while effectively managing risk
• A collaborative individual who builds strong relationships across engineering, infrastructure, and product teams
• Someone who can balance technical depth with commercial awareness
• A security champion who remains curious about emerging threats and evolving technologies
• An individual who embodies values of Respecting Each Other, Achieving as One, and Growing Together

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.