Information Security Engineer

Overview

In this role you will design, implement and continually improve security controls and platforms to protect AJ Bell and its customers. You’ll work closely with the CISO and Technology Services to embed security into design, delivery and operations, balancing risk with practical, scalable solutions. You’ll shape detection, prevention and response capabilities, driving automation and maturity across the security estate. This is a hands-on engineering role with a clear impact on customer trust and business enablement.

Pay / Benefits

• competitive starting salary
• 26 days holiday
• pension with matched contributions
• discretionary bonus scheme
• share schemes (including BAYE)
• private healthcare

Responsibilities

• Design and deliver enterprise security solutions across endpoint, cloud, network, DevOps and security monitoring environments
• Implement secure infrastructure controls with scalability and resilience
• Evaluate and implement security tools and platforms, driving automation and integration
• Oversee patch management and coordinate risk reduction across systems
• Support server hardening and secure configurations with Infrastructure and Service Delivery
• Provide security oversight on projects and change initiatives from design through delivery
• Support audits, regulatory reviews and due diligence with robust controls
• Act as technical liaison between CISO and Infrastructure teams for alignment across security and operations
• Contribute to continuous improvement of cybersecurity risk management processes

Key requirements

• Proven experience implementing enterprise security platforms
• Strong knowledge of security risk management tools and techniques
• Deep understanding of security solutions (SIEM, PAM, IGA, endpoint protection, email/web gateways)
• Experience with firewall technologies (desirable)
• Knowledge of cloud security standards and solutions (desirable)
• Strong understanding of core IT and networking principles
• Awareness of evolving threat landscape
• Experience with frameworks such as ISO27001, NIST or similar
• Significant IT security experience
• Financial services or e-commerce experience preferred
• CISSP (achieved or in progress) desirable

• Effective communicator
• Strong problem-solving skills
• Ability to take ownership and deliver end-to-end solutions
• Enterprise security platforms
• Security risk management tools and techniques
• SIEM, PAM, IGA, endpoint protection, email/web gateways

…