Security Engineer

Role overview
Role title: Security Engineer
Context: Secure, multi-supplier MOD environment
Primary objective: Focuses on the tactical implementation, hardening, and continuous monitoring of security controls within infrastructure and pipelines. You work hand-in-hand with development and DevOps teams to ensure every release meets rigorous defence cybersecurity standards.
Key Responsibilities
System Hardening: Configure and harden operating systems, containers, networks, and cloud services against established security baselines.
Vulnerability Management: Execute regular vulnerability assessments, interpret security scan results, and collaborate with developers on rapid remediation.
Pipeline Tooling: Maintain and configure security tooling integrated within CI/CD pipelines, ensuring automated compliance checks run smoothly.
Incident Support: Assist in investigating security anomalies, log analysis, and threat hunting activities across secure environments.
Core Technical Skills
Practical experience with Linux/Windows hardening, firewalls, and network segmentation.
Familiarity with security scanning tools (e.g., Trivy, SonarQube, Nessus) and SIEM solutions.
Understanding of container security (Docker, Kubernetes) and cloud infrastructure security.
Leadership and Personal Strengths
Detail-oriented with a methodical approach to troubleshooting security alerts.
Collaborative attitude, viewing security as an enabler of speed rather than a blocker.
High integrity and discretion handling sensitive defence assets.

Typical Qualifications / Experience
Professional Experience: 3 years’ hands-on experience in infrastructure and pipeline security, operating system hardening (Linux/Windows), vulnerability management, and CI/CD security tooling.
Education & Foundational Benchmark: Cyber or IT NVQ Level 4 or equivalent technical education / STEM degree.
Professional Certifications: Industry cybersecurity certification (e.g. CompTIA Security+, CySA+, SSCP, or working towards CISSP/CISM); practical cloud or tooling accreditation (e.g. AWS/Azure Security Associate, Tenable Nessus).