Information Security Engineer

Overview

In this role you will design, implement and evolve security controls and platforms to protect AJ Bell and its customers. You will work closely with the CISO and Technology Services to build scalable, automated security solutions across endpoints, cloud, networks and monitoring. You’ll embed security by design in projects, improve threat detection and response, and drive risk-aware improvements that enable secure innovation. This hands-on engineering position offers a clear impact on protecting customer trust at scale.

Pay / Benefits

• competitive starting salary
• 26 days holiday
• Pension with matched contributions
• Discretionary bonus scheme
• Share schemes (including free shares and BAYE)
• Health Cash Plan and discounted private healthcare

Responsibilities

• Design and deliver enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring
• Implement secure infrastructure controls with scalability and resilience
• Evaluate and adopt new security tools, driving automation and integration
• Oversee patch management to reduce risk and coordinate with stakeholders
• Support server hardening and secure configuration initiatives with Infrastructure/Service Delivery
• Provide security oversight across projects and change initiatives
• Support audits and regulatory reviews with robust evidence and controls
• Act as technical link between CISO and Infrastructure teams to align security and operations
• Contribute to continuous improvement of cybersecurity risk management processes

Key requirements

• Proven experience implementing enterprise security platforms
• Strong knowledge of security risk management tools and techniques
• Deep understanding of security solutions (SIEM, PAM, IGA, endpoint protection, email/web gateways)
• Experience with firewall technologies (desirable)
• Knowledge of cloud security standards and solutions (desirable)
• Strong understanding of core IT and networking principles
• Awareness of the evolving threat landscape
• Experience with frameworks such as ISO27001, NIST or similar
• Significant IT security experience, preferably in financial services or e-commerce
• Ability to take ownership and deliver end-to-end solutions
• Effective communicator across technical and non-technical teams
• CISSP (achieved or in progress) desirable

• Effective communicator across technical and non-technical teams
• Strong problem-solving skills and attention to detail
• Ability to take ownership and deliver end-to-end solutions
• Enterprise security platforms
• Security risk management tools and techniques
• SIEM

…