Security Engineer - Operations

About the role

George Weston Foods is looking for a Security Engineer to work on the day-to-day operation, administration and continuous improvement of its cyber security capabilities. The role spans security operations, incident response, vulnerability management, security engineering and advisory services, and reduces cyber risk across enterprise and cloud environments. It suits a well-rounded security professional who enjoys working across technology, people and process domains.

Key responsibilities

• Investigate security alerts, suspicious activity and incidents, coordinating containment, eradication and recovery where needed.
• Administer, maintain and optimise security technologies including Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID security controls, Zscaler and vulnerability management platforms.
• Run threat hunting and proactive investigations to identify and mitigate emerging threats.
• Manage vulnerability management processes, coordinate security assessments and drive risk-based remediation.
• Take part in security reviews of projects, systems and technology changes, giving practical recommendations.
• Deliver security awareness initiatives, phishing simulations and targeted training.
• Build scripts, integrations and workflows to automate security processes.
• Support security improvement initiatives, strategic projects and the security roadmap.

Required profile

• Tertiary qualification in a relevant technology discipline; security certifications such as CISSP, Security+, MCSE Security or equivalent are highly regarded.
• Experience in enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, controls, protocols and industry standards.
• Ability to engage stakeholders, communicate clearly and turn technical risks into practical business guidance.
• Analytical and problem-solving skills, with the ability to prioritise actions and deliver outcomes.

Required skills

• Hands-on experience with SIEM, endpoint protection, vulnerability management, intrusion detection and related platforms.
• Use of PowerShell, Python, APIs, workflow automation or low-code/no-code tools.

Candidates may be asked to complete pre-employment screening tests, including a criminal record check. Applications are made through the company's application process.