Senior Cyber Security Engineer

Experis IT; Manchester; Hybrid; GBP 54,000 - 66,000; Full time

Job summary

Experis IT is seeking a Senior Cyber Security Engineer to own the security stance across Azure, web estate, and identity platforms. The role focuses on embedding security into development and operations within a hybrid setup in Manchester.

You will lead WAF management (Cloudflare/Akamai), enforce secure ingress controls, and collaborate with DevOps to shift security left in CI/CD. Strong Azure and IAM expertise are essential.

Qualifications

• Hands-on cyber security engineering or security architecture experience.
• Experience securing Azure environments including Defender for Cloud and Entra ID.
• Experience managing WAF technologies such as Cloudflare or Akamai.
• Strong understanding of web and API security, OWASP Top 10.
• Experience implementing identity and access management controls (Conditional Access, identity governance).
• Experience in Agile, DevOps, or platform engineering environments.
• Knowledge of AI/LLM security risks is advantageous.

Responsibilities

• Own and enhance the security posture of the Azure cloud, web estate, and identity platforms.
• Manage and optimise WAF technologies (Cloudflare, Akamai) to protect against threats.
• Lead implementation and improvement of web ingress controls including DDoS protection and certificate management.
• Embed secure-by-design principles across applications, APIs, and infrastructure.
• Promote security in DevOps and CI/CD via shift-left security initiatives.
• Manage Microsoft Defender for Cloud and identify/remediate security risks.
• Own Entra ID security controls including Conditional Access and privileged access management.
• Define security standards and governance frameworks for scalable delivery.
• Coordinate investigations with Arctic Wolf and security partners.

Skills

Azure security

WAF management

Identity governance

Conditional Access

Security architecture

DevOps security

Threat detection

Security operations liaison

Tools

Cloudflare

Akamai

Microsoft Defender for Cloud

Entra ID

Job description

Senior Cyber Security Engineer

Hybrid: Once a week in the office (Manchester)

Permanent Paying up to £60k + bonus + benefits

Experis are partnering with a UK organisation, as they continue to strengthen their cyber security capabilities in support of a growing digital estate and cloud-first technology strategy.

We are supporting them in the search for an experienced Senior Cyber Security Engineer to take ownership of the organisation's security posture across its web platforms, Azure cloud environment, identity services, and emerging AI capabilities.

This is a highly influential technical role sitting at the intersection of infrastructure, engineering, and digital delivery teams. The successful candidate will play a critical role in securing technology landscape by embedding security best practices, strengthening controls, and ensuring security is built into everything the organisation develops and operates.

What You’ll Be Doing

• Owning and enhancing the security posture of Azure cloud environment, web estate, and identity platforms
• Managing and optimising web application Firewall (WAF) technologies including Cloudflare and Akamai to protect against evolving threats
• Leading the implementation and continuous improvement of web ingress controls including DDoS protection, certificate management, and traffic security
• Working closely with development and engineering teams to embed secure-by-design principles across applications, APIs, and infrastructure
• Driving adoption of security best practices within DevOps and CI/CD environments through shift-left security initiatives
• Managing Microsoft Defender for Cloud and proactively identifying, assessing, and remediating security risks across the estate
• Owning Entra ID security controls including Conditional Access, identity governance, access reviews, and privileged access management
• Defining security standards, patterns, and governance frameworks that enable secure and scalable technology delivery
• Acting as the primary technical security contact for Arctic Wolf and other security partners, coordinating investigations and response activities
• Supporting the secure adoption of AI technologies through the development of appropriate controls, guardrails, and risk management frameworks
• Participating in architecture and design reviews, ensuring security considerations are Embedded from the outset
• Monitoring emerging threats and translating security intelligence into practical improvements across the business

Experience Required

• Proven experience in a hands‑on Cyber Security Engineering or Security Architecture role
• Strong experience securing Azure environments, including Microsoft Defender for Cloud and Entra ID
• Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms
• Strong understanding of web application security, API security, and OWASP Top 10 vulnerabilities
• Experience implementing identity and access management controls, including Conditional Access and identity governance
• Experience working within Agile, DevOps, or platform engineering environments
• Solid understanding of cloud security principles, network security, and least‑privilege access models
• Experience engaging with security operations, MDR, or SOC providers to manage incidents and improve security controls
• Knowledge of AI and Large Language Model (LLM) security risks would be highly advantageous
• Excellent stakeholder management and communication skills, with the ability to explain technical risks to both technical and non‑technical audiences
• Experience within healthcare, dental, or other regulated industries would be beneficial

What We’re Looking For

• A pragmatic security professional who enables innovation while effectively managing risk
• A collaborative individual who builds strong relationships across engineering, infrastructure, and product teams
• Someone who can balance technical depth with commercial awareness
• A security champion who remains curious about emerging threats and evolving technologies
• An individual who embodies values of Respecting Each Other, Achieving as One, and Growing Together