Senior Cyber Security Engineer in Manchester

Energy Jobline ZR; Manchester; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

Hybrid work model

Bonus & benefits

Job summary

Energy Jobline ZR seeks a Senior Cyber Security Engineer to own the security posture of our digital estate. You will manage Azure security, web platforms, and identity services while embedding secure-by-design practices across development teams.

You will lead WAF operations with Cloudflare/Akamai, implement ingress controls, and coordinate with MDR/SOC partners to mitigate threats. Hybrid in Manchester, salary up to £60k plus bonus and benefits.

Qualifications

• Proven experience in hands-on cyber security engineering or security architecture.
• Strong experience securing Azure environments including Defender for Cloud and Entra ID.
• Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms.
• Solid understanding of web and API security and OWASP Top 10 vulnerabilities.
• Experience with identity and access management controls, including Conditional Access and identity governance.

Responsibilities

• Own and enhance the security posture of Azure, web estate, and identity platforms.
• Lead the implementation and improvement of web ingress controls and DDoS protection.
• Embed secure-by-design principles across applications, APIs, and infrastructure.
• Promote security in DevOps and CI/CD through shift-left initiatives.
• Coordinate with security partners and MDR/SOC to manage incidents.

Skills

Azure security

WAF management

Identity security

DevOps security

Security architecture

Tools

Cloudflare

Akamai

Job description

Job Description

Senior Cyber Security Engineer

Hybrid: Once a week in the office (Manchester)

Permanent Paying up to £60k + bonus + benefits

Experis are partnering with a UK organisation, as they continue to strengthen their cyber security capabilities in support of a growing digital estate and cloud-first technology strategy.

We are supporting them in the search for an experienced Senior Cyber Security Engineer to take ownership of the organisation's security posture across its web platforms, Azure cloud environment, identity services, and emerging AI capabilities.

This is a highly influential technical role sitting at the intersection of infrastructure, engineering, and digital delivery teams. The successful candidate will play a critical role in securing technology landscape by embedding security best practices, strengthening controls, and ensuring security is built into everything the organisation develops and operates.

What You'll Be Doing

• Owning and enhancing the security posture of Azure cloud environment, web estate, and identity platforms
• Managing and optimising web application Firewall (WAF) technologies including Cloudflare and Akamai to protect against evolving threats
• Leading the implementation and continuous improvement of web ingress controls including DDoS protection, certificate management, and traffic security
• Working closely with development and engineering teams to embed secure-by-design principles across applications, APIs, and infrastructure
• Driving adoption of security best practices within DevOps and CI/CD environments through shift-left security initiatives
• Managing Microsoft Defender for Cloud and proactively identifying, assessing, and remediating security risks across the estate
• Owning Entra ID security controls including Conditional Access, identity governance, access reviews, and privileged access management
• Defining security standards, patterns, and governance frameworks that enable secure and scalable technology delivery
• Acting as the primary technical security contact for Arctic Wolf and other security partners, coordinating investigations and response activities
• Supporting the secure adoption of AI technologies through the development of appropriate controls, guardrails, and risk management frameworks
• Participating in architecture and design reviews, ensuring security considerations are Embedded from the outset
• Monitoring emerging threats and translating security intelligence into practical improvements across the business

Experience Required

• Proven experience in a hands-on Cyber Security Engineering or Security Architecture role
• Strong experience securing Azure environments, including Microsoft Defender for Cloud and Entra ID
• Practical expertise managing WAF technologies such as Cloudflare, Akamai, or equivalent enterprise platforms
• Strong understanding of web application security, API security, and OWASP Top 10 vulnerabilities
• Experience implementing identity and access management controls, including Conditional Access and identity governance
• Experience working within Agile, DevOps, or platform engineering environments
• Solid understanding of cloud security principles, network security, and least-privilege access models
• Experience engaging with security operations, MDR, or SOC providers to manage incidents and improve security controls
• Knowledge of AI and Large Model (LLM) security risks would be highly advantageous
• Excellent stakeholder management and communication skills, with the ability to explain technical risks to both technical and non-technical audiences
• Experience within healthcare, dental, or other regulated industries would be beneficial

What We're Looking For

• A pragmatic security professional who enables innovation while effectively managing risk
• A collaborative individual who builds strong relationships across engineering, infrastructure, and product teams
• Someone who can balance technical depth with commercial awareness
• A security champion who remains curious about emerging threats and evolving technologies
• An individual who embodies values of Respecting Each Other, Achieving as One, and Growing Together