Security Engineer

Security Engineer (Path to Architecture)

Remote-first (UK): optional hubs in London, Knutsford

You've spent years hardening configs, tuning Defender policies and fixing what other people designed. You know you could design it better, but every architect role asks for "proven architecture experience". How do you get that without someone giving you the chance?

This is the chance.

A UK-listed global engineering group is building its security function from the ground up.

The CEO wants monthly cyber updates at executive committee level.

The budget has been committed.

They need a Security Engineer to be the first technical security voice in every architecture decision across the group.

You'll be mentored by a Head of Cyber who will give you architectural cover while you build your confidence. You'll work alongside a newly formed architecture function that sets the principles, so you're learning inside a structure. Your job is to turn those principles into real security designs.

The work is architecture, and the plan is for you to grow into owning it.

What You'll Do

• Act as the front door for security on major architecture and engineering projects across the group, so you're in the room from the start rather than called in at the end.
• Design security patterns and standards for a Microsoft 365 and Azure estate: identity, privileged access, Entra, Defender and Sentinel.
• Turn business requirements from global divisions into security capabilities, the core skill that separates architects from engineers.
• Embed secure-by-design into a live IT transformation, shaping systems before they're built.
• Own technical assurance across pen testing, vulnerability assessment and control validation, so you can see whether the designs actually hold up.
• Hold managed service and MDR partners to account as the technical authority.

What We're Looking For

• A strong Security Engineer with solid hands-on Microsoft security experience (Azure, M365, Entra, Defender, Sentinel) and good IAM/PAM know-how.
• Network and endpoint security experience, including segmentation and EDR.
• Someone who already thinks beyond the ticket, asking "why is it built this way?" and "what should it look like?"
• Exposure to design work is a plus: contributing to architecture decisions, writing standards, or reviewing solution designs. A formal architect title isn't needed.
• Pragmatism and curiosity matter more than a perfect checklist. Defence, OT or Rapid7 experience is a bonus, not a requirement, and no SC clearance is needed.

You’ll get a ground-floor seat in a growing function, with leadership and direct reports expected as the team scales through 2027–28.