Security Engineer

Security Officer / Engineer

• Location: Remote (occasional travel to Leeds required)
• Rate: 520 per day Inside IR35
• Duration: Until end of November 2025

Overview

We are looking for a technically strong Security Officer/Engineer to take ownership of security monitoring risk management and compliance across our products and services. This is a hands-on technical role not an administrative position. The successful candidate will work independently and proactively raising risks documenting processes and performing risk assessments reporting directly to the Security Lead and Senior Management Team in a timely and structured manner.

Key Responsibilities

• Apply AWS security best practice across Guard Duty VPC networking Security Groups IAM WAF and other firewall configurations
• Monitor the security posture of products and services on an ongoing basis
• Raise manage and track security incidents through to resolution
• Monitor Tenable and Dependabot outputs enforcing remedial actions as required
• Manage penetration testing programmes including scoping procurement and enforcement of remedial actions
• Liaise with central Cyber Security teams maintaining alignment on standards and incidents
• Track and follow up red-line statuses ensuring associated remedial actions are completed
• Run annual AWS Well-Architected Reviews across relevant services
• Execute Red Team tests against products and services
• Conduct spot-checks on recorded live accesses to ensure compliance and integrity

Key Requirements

• Proven hands-on experience in a security engineering or security officer role
• Strong AWS security experience including Guard Duty IAM VPC Security Groups and WAF
• Experience managing and responding to security incidents
• Familiarity with vulnerability management tools including Tenable and Dependabot
• Experience scoping and managing penetration testing engagements
• Ability to work independently prioritise risks and report clearly to senior stakeholders
• Strong documentation skills including risk assessments and process documentation

Desirable

• Experience working with central government or NHS Cyber Security teams
• AWS Security speciality certification or equivalent
• Experience running Red Team exercises
• Knowledge of GDS or public sector security frameworks

Apply now or email for more information.