Architect and implement cloud security infrastructure, investigate incidents, manage vulnerabilities, and lead security initiatives across cloud and Kubernetes environments, with a focus on AWS and secure automation.
Information Security Manager
📜 Description
- Run SIEM, EDR and vulnerability management, driving detection, triage and remediation against agreed SLAs.
- Manage identity, DLP and cloud security controls across Microsoft Entra ID, Purview, AWS and Azure.
- Lead technical incident response, containment and recovery, and investigate insider security events.
- Manage MSSP and MSP relationships; coordinate penetration testing and drive remediation to closure.
- Improve proactive security through threat hunting and detection engineering.
- Own the Information Security roadmap and technical reporting, partnering with the Information Security Officer on strategy, governance, audit and risk assurance.
🛠️ Requirements
- Relevant industry certification, such as CompTIA Security+ or Microsoft SC-200, or equivalent hands-on experience.
- Hands-on SOC analyst, security engineer or technical security experience in a senior or lead position, within financial services or another regulated sector.
- Experience running vulnerability management programmes and handling technical incident response end to end.
- Working knowledge of SIEM, EDR/XDR, Microsoft 365 and Entra ID security controls, PowerShell or Python, network security, and AWS and Azure security.
- Desirable: CISSP, CISM, GIAC, CREST or relevant vendor accreditations; UK financial services or MSSP/supplier management experience; Google SecOps, Microsoft Defender or AWS security tooling.
✨ Benefits
- Generous annual leave plus bank holidays.
- Up to 6 weeks per year to work remotely from anywhere in the world, subject to company policy.
- Tailored learning and development.
- Hybrid working to support work-life balance; arrangements may vary during induction.
- Private medical care with Vitality.
- Enhanced pension scheme.
- Maternity, paternity and adoption pay.
- Discretionary company bonus.
Full job description
Key Responsibilities
Corporate Responsibilities
Read and follow all relevant company policies and procedures
Adhere to all risk-related responsibilities applicable to your role, as set out in the Risk Management Policy
Abide by all compliance and financial crime related policies, procedures and reporting obligations applicable to your role
Required Skills & Experience
Similar jobs
Search more Cybersecurity Engineer jobsOwn product security for an AI agent and cloud platform, building automated security testing and vulnerability management while protecting customer data and guiding engineering teams to ship safely.
Secure AI systems and enterprise security tooling by designing AI lifecycle controls, governing AI applications and agents, and embedding security into cloud environments and CI/CD workflows.
Lead end-to-end security investigations, build and tune threat detections, strengthen security controls, and help secure cloud, container, and corporate environments across the company.
Design and operate secure systems across cloud, applications, backend services, and edge devices, partnering with software teams to protect mission-critical technology and meet FedRAMP and DoD requirements.
