Information Security Engineer

Overview

In this role you will design, build, and continuously improve security controls and platforms to protect AJ Bell and its customers. You’ll work across endpoint, cloud, network, DevOps, and security monitoring to deliver scalable, automated protections. You’ll guide security integrations and ensure controls are resilient, auditable, and aligned with best practice. You will partner with Infrastructure and business teams to embed security from design through delivery, while enabling the business to move with confidence. This is a hands-on role that shapes our security foundations and threat response capabilities.

Pay / Benefits

• Competitive starting salary
• 26 days holiday
• 7% Pension with matched contributions
• Discretionary bonus scheme
• Share schemes (including free shares and BAYE)
• Health Cash Plan and discounted private healthcare

Responsibilities

• Design, deliver and continuously improve enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring environments
• Implement secure infrastructure controls with scalability, resilience and operational effectiveness
• Evaluate, select and integrate new security tools and platforms to drive automation and measurable value
• Oversee patch management across systems and hardware to reduce risk
• Support server hardening and secure configurations with Infrastructure and Service Delivery teams
• Ensure security is embedded from design to delivery across projects and change initiatives
• Support audits, regulatory reviews and due diligence with robust evidence and controls
• Act as a technical link between the CISO function and Infrastructure teams to align security and operations
• Contribute to continuous improvement of cybersecurity risk management processes

Key requirements

• Proven experience implementing enterprise security platforms
• Strong knowledge of security risk management tools and techniques
• Deep understanding of security solutions (SIEM, PAM, IGA, endpoint protection, email/web gateways)
• Experience with firewall technologies (desirable)
• Knowledge of cloud security standards and solutions (desirable)
• Strong understanding of core IT and networking principles
• Awareness of the evolving threat landscape
• Experience with frameworks such as ISO27001, NIST or similar
• Significant experience in IT security
• Financial services or e-commerce experience preferred
• CISSP (achieved or in progress) desirable

• Strong problem-solving skills and attention to detail
• Ability to take ownership and deliver end-to-end solutions
• Effective communicator across technical and non-technical teams
• SIEM
• PAM
• IGA

…