Job Description:

IT & Network Security Engineer

• Job Title: IT Security Engineer
• Location: Oxfordshire - Hybrid (2 days per week on-site)
• Industry: Enterprise SaaS / Technology Solutions

About the Role

We are partnering with a rapidly scaling, globally active software and data platform enterprise looking to appoint a dedicated IT Security Engineer to join their growing security operations team.

In this role, you will be instrumental in defending core infrastructure, enterprise networks, and critical data against modern cyber threats. Working closely with the Head of IT Security, you will oversee threat detection, manage security appliances, enforce compliance frameworks, and ensure that robust defensive postures are embedded across the technology stack.

Key Responsibilities

• Security Operations: Oversee network telemetry for suspicious activities, execute rapid threat detection and response, tune perimeter defenses (firewalls and virtual private networks), and direct proactive patch management cycles.
• Compliance & Audits: Drive internal control testing and maintain alignment with structured information security standards such as ISO 27001, supporting both internal evaluations and external auditor walkthroughs.
• Incident Handling: Manage the end-to-end lifecycle of security alerts or breaches, lead formal root-cause analysis, and embed corrective actions into future preventive safeguards.
• Third-Party Risk: Evaluate external vendors and technology partners to ensure compliance with internal security policies and benchmark security standards.
• Cross-Functional Collaboration: Partner directly with IT infrastructure, application support, software engineering, and legal teams to bake security-by-design principles into technical architectures.

Key Requirements

• Experience: A minimum of 3 to 5 years of dedicated professional experience within an IT or information security function.
• Technical Proficiency:
• Deep working knowledge of core network protocols (TCP/IP, DNS, routing, switching) and architecture design.
• Hands-on proficiency with network analysis utilities, packet sniffers, port scanners, and SIEM monitoring suites.
• Working familiarity with cryptographic methods, identity controls, endpoint hardening, and multi-cloud security management (AWS, Azure, or GCP).
• Framework Knowledge: Solid comprehension of ISO 27001 principles, threat modelling frameworks, vulnerability scanning, risk treatment life-cycles, and secondary compliance standards (e.g., SOC 2 or PCI DSS).
• Qualifications: Relevant technical diploma or equivalent practical background, reinforced by desirable professional credentials (such as CISSP, CEH, CCNA Security, or ISO 27001 Lead Auditor certifications).
• Personal Attributes: Strong analytical problem-solving skills, clear communication capabilities, and the adaptability to thrive in a fast-moving, collaborative environment.

What is on Offer

• Competitive base salary package.
• Sustainable hybrid working model (2 days on-site in Oxfordshire).
• Continuous professional development and training opportunities within an expanding tech organisation.

If you are a proactive security professional looking to make a meaningful impact, please submit your CV to begin a confidential discussion.