Security Infrastructure Systems Engineer

Guildford Source: WhatJobs

£33,000–£73,000

Salary: £33,000 - 73,000 per year

Requirements

Educated to degree level or equivalent experience, preferably in computing
CISSP, CCSP, or Security+ are an advantage but not necessary
3–5+ years of experience in security analysis, infrastructure, DevSecOps, or a related role
Hands-on experience securing cloud platforms such as AWS, Azure, or Google Cloud
Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls
Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools
Experience with Linux administration, system hardening, patch management, and configuration management
Experience investigating security incidents, reviewing logs, identifying root causes, and implementing remediation
Strong knowledge of networking, including TCP/IP, DNS, firewalls, VPNs, proxies, and load balancers
Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python, or Bash
Familiarity with containers and orchestration platforms such as Docker and Kubernetes
Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2
Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews
Strong troubleshooting, documentation, and cross-functional communication skills
Team player with strong communication skills
Competent troubleshooting skills
Ability to articulate project deliverables and designs
Ability to work under own initiative and in a busy environment

Responsibilities

Implement, operate, maintain, and continuously improve our core IT infrastructure with a focus on security, resilience, and compliance
Provide 3rd line support to the Service Desk
Work closely with infrastructure, networking, and application colleagues to embed security into infrastructure design and operation
Maintain infrastructure services to agreed availability, performance, and security standards
Implement secure configurations and system-hardening standards
Review and remediate infrastructure vulnerabilities
Support access control processes, including access reviews, privileged access checks, and enforcement of least privilege principles
Support endpoint and server security controls
Ensure appropriate logging and security monitoring is enabled and reviewed
Support encryption and certificate-management requirements
Review infrastructure against security standards and vendor recommendations
Identify unsupported and end-of-life systems and associated risks
Support security improvements across existing infrastructure
Oversee and engage in system upgrades, patching, configuration changes, and lifecycle-management activities
Monitor security and compliance within our infrastructure capacity, performance, availability, and health
Diagnose and resolve security incidents and problems
Support backup, recovery, business continuity, and disaster-recovery arrangements
Participate in infrastructure projects, migrations, and technology refresh programmes
Manage the security of the infrastructure through appropriate change, configuration, and release-management processes
Participate in CSIRT activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness

Technologies

AWS
Ansible
Azure
Bash
Cloud
DevSecOps
Docker
Embedded
Support
Kubernetes
Linux
Python
RBAC
Security
TCP/IP
Terraform

We are SSTL, and this Security Infrastructure Engineer role reports to our Infrastructure Manager. You will work closely with our infrastructure, networking, and application colleagues to ensure security is embedded into the design and operation of infrastructure rather than treated as a separate activity. The role focuses on core IT infrastructure delivery with particular emphasis on security, resilience, compliance, and continuous improvement.

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →