Cyber Security Engineer (Cloud Security)

Location: Hybrid, with two to three days per week on site in the East Midlands and occasional travel to the new Southern office. Candidates must have at least five years of UK-based cyber security experience; overseas applicants cannot be accepted.

Company

A well-established and rapidly growing UK financial services business with in-house development, analytics, and expanding multi-site operations.

What you will do

• Own the technical security of the estate, working with IT operations, development, and platform teams.
• Strengthen authentication, access management, administrative privilege, endpoint security, device compliance, and secure configuration.
• Assess cloud services, hosted workloads, third-party applications, integrations, and data-sharing arrangements for security weaknesses.
• Run vulnerability and exposure management, coordinate remediation with system owners, and verify that fixes remain effective.
• Investigate security alerts and incidents, maintain practical response procedures, and extend security coverage to the new office.
• Report on risk, incidents, and remediation progress while supporting audits and customer assurance requests.

Requirements

• At least five years of UK-based experience in cyber security, infrastructure security, cloud security, or a closely related technical role.
• Experience gained in a regulated commercial environment such as financial services, insurance, lending, wealth management, or professional services.
• Practical experience securing enterprise identity and collaboration services, including identity and access management, multifactor authentication, conditional access, and privileged access.
• Experience securing Windows endpoints through a modern device management platform and using endpoint detection and response or comparable technologies.
• Experience assessing, prioritising, and driving vulnerability remediation in a live environment.
• Essential working knowledge of public cloud security, including identity, networking, logging, data protection, and secure configuration.
• Ability to influence stakeholders, pursue remediation constructively, distinguish genuine risk from technical noise, recommend proportionate improvements, and explain security matters clearly to non-technical colleagues.
• Visa sponsorship is not available, and overseas applicants cannot be accepted.

Nice to have

• Relevant cyber security certifications.
• Experience with ISO 27001, Cyber Essentials, the NIST Cyber Security Framework, or the CIS Controls.

Culture & Benefits

• Very competitive base salary dependent on experience.
• Uncapped annual bonus, typically five to fifteen per cent of base salary.
• Hybrid working with two to three days per week on site.
• Pension, enhanced leave, and a modern office environment.
• Opportunity to shape security across a growing multi-site estate.

Hiring process

• Apply with a CV through the application link.
• A criminal records check and credit history check form part of the recruitment process.