Senior Cyber Security Engineer

About the role

A growing HealthTech company is looking for a hands-on security engineer to act as its main internal technical security contact. The role sits directly under IT and Security leadership and covers SecOps, cloud and SaaS security, incident response and application security. It is hybrid, based in a new office, with a competitive salary.

Key responsibilities

• Act as the main internal technical security contact, working with an outsourced SOC to investigate, contain and remediate security incidents.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments, helping teams prioritise and resolve issues.
• Work with security tooling including CrowdStrike, Sumo Logic, Proofpoint, Okta, Nullify and UpGuard.
• Partner with software engineering and architecture teams to strengthen secure development practices and application security.
• Review new SaaS platforms, vendors and technical solutions from a security perspective, especially where sensitive customer information is involved.
• Help implement technical controls across identity, endpoint security, data protection, cloud security and ISO 27001 readiness.

Required profile

• Hands-on experience in Security Engineering, Security Operations or a similar technical cybersecurity role.
• Broad exposure to areas such as endpoint security, SIEM, vulnerability management, IAM, cloud security or SaaS security.
• Comfortable investigating security issues yourself, rather than working only at an advisory or governance level.
• Exposure to a technology, SaaS or product environment and an understanding of secure development or application security principles.
• Able to work with engineers and business stakeholders, translating security risk into practical actions.
• Pragmatic and solutions-focused, helping the business move forward securely.