Security Engineer

Comply365
Bristol
4 days ago
Create job alert

About Comply365

Comply365 is a leading provider of Operational Content Management, Safety Management, and Training Management in the highly regulated industries of Aviation, Defense, and Rail. We provide a powerful combination of expertise and products underpinned by unified best practices, empowering airlines, rail, and defense organizations with the most comprehensive product portfolio to elevate operational excellence, and transform safety management and training, with closer integration of data across these domains. Comply365 ensures our customers' teams and assets are always geared for peak operational performance and unlocks unparalleled financial and operational gains through more streamlined, robust, and agile operations.

Our culture truly sets us apart at Comply365. In addition to our unwavering dedication to our customers and products that we offer, we are, first and foremost, a diverse team of driven, energetic, and passionate individuals who work together to make a direct impact on the future of our company. We have built, and continue to build a world-class, dynamic, and people-first culture. We believe in celebrating one another's achievements, open communication, and transparent leadership. 

About the Position

We're seeking a Security Engineer to join our team and ensure our rapidly growing platform remains secure for users worldwide. In this role, you'll handle security assessments, prioritise remediation actions, and work closely with Product and Operations teams. You'll also design and maintain security controls, enhance monitoring, and foster a security-first culture across the company.

As a person, you'll be proactive rather than reactive, able to build cross functional relationships and be able to articulate value and represent data in a way that can be consumed at all levels.

Key Duties and Responsibilities

  • Conducting security assessments and prioritising findings for remediation.
  • Designing and maintaining application and infrastructure security controls.
  • Enhancing security monitoring to detect abnormal behaviour.
  • Implementing firewalling to add extra layers of protection against security breaches.
  • Reviewing and troubleshooting parts of the system to identify how to enhance security.
  • Reporting results of security metrics to the Technology Operations management.
  • Developing documentation for external threats.
  • Responding to security incidents.
  • Coordinating incident response across teams.
  • Performing security assessments and work with development teams on application security.
  • Promoting security awareness and working with our training team to develop effective training within the company.


Key Skills and Qualifications

  • Strong knowledge of system and network security, protocols, and best practices, including ISO27001, SOC2 and Cyber Essentials controls.
  • Experience with firewalls, intrusion detection systems, anti-virus software, and data encryption.
  • Knowledge of risk assessment tools, technologies, and methods.
  • Experience designing secure networks, systems, and application architectures.
  • Eligible for SC Clearance (lived in the UK for 5 years or more).

Vulnerability Management -

  • Carry out internal vulnerability assessments in line with industry best practice.
  • Manage our 3rd party penetration testing (Continuous Security Testing) service, review of reports and ensure technical teams resolve defects in a timely manner.
  • Ensuring our automated scanning tools (Nessus and Qualys) are maintained, provide the right coverage, and all findings are notified to relevant teams.
  • Ensuring AWS Shield / AWS WAF / Akamai / Firewalls and other similar tools/configuration are operating effectively.

SIEM -

  • Lead and improve SIEM processes across the business.

Logging and Auditing -

  • Ensuring standards are updated and clearly understood across the business.
  • Ensure collected data is useful and actionable.

Office 365, DLP and Endpoint Security. Work with IT teams to ensure:

  • Policy changes to secure devices are in place and suitable.
  • Security updates are applied to protect the business.
  • Data loss prevention and labelling for the classification and protection of data.

Security Benchmarks -

There are several key security benchmarks that we base our current security programs on, these are:

  • Centre for Internet Security (CIS - non-profit cross industry body),
  • National Cyber Security Centre (NCSC - UK Government Backed) and,
  • National Institute of Standards and Technology (NIST (800-53) - US Government backed).


Why come aboard? 

We can't promise you a bar in far Bombay, but we have a range of benefits including considerations for healthcare, private medical insurance, 27 days holiday rising with length of service, buy/sell up to 3 days holiday, work life balance, and many more! For more information on our full range of benefits, please visit our websiteComply365_Benefits_UK.pdf



Job Posted by ApplicantPro

Related Jobs

View all jobs

Security Engineer

Security Engineer, Senior, London, Bank 75k

Security Engineer

Security Engineer - Governance, Risk and Compliance (GRC), London New London

Security Engineer, colchester

Security Engineer, warrington, cheshire

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Global vs. Local: Comparing the UK Cybersecurity Job Market to International Landscapes

Understanding opportunities, salaries, and work culture in cybersecurity across the UK, the US, Europe, and Asia Cybersecurity has rapidly ascended from a back-office concern to a strategic priority for every industry. As data breaches, ransomware, and nation-state attacks increase in frequency and sophistication, organisations worldwide are racing to fortify their digital defences. This ongoing surge in cyber threats fuels an unprecedented demand for skilled security professionals—ranging from penetration testers and threat intelligence analysts to cloud security architects and CISOs. In this article, we’ll explore how the UK cybersecurity job market compares to major international hubs in the United States, Europe, and Asia. We’ll discuss job opportunities, salary bands, work culture, and provide guidance for those who might be contemplating remote or overseas positions. By understanding the nuances of each region’s cybersecurity ecosystem, you can make a more informed decision about where and how to advance your career in this high-impact, fast-evolving sector. Whether you’re a seasoned expert with years of experience or a career-changer eager to break into cybersecurity, this overview will help you navigate the global landscape. By the end, you’ll have a clearer perspective on each region’s advantages and challenges—along with practical insights for seizing the best opportunities in a field that has become mission-critical for every modern organisation.

Cybersecurity Leadership for Managers: Strategies to Motivate, Mentor, and Set Realistic Goals in Threat-Driven Environments

In an era of rapidly increasing data breaches, ransomware attacks, and corporate espionage, the importance of robust cybersecurity cannot be overstated. Protecting digital assets has become as essential as safeguarding physical resources, and organisations worldwide rely heavily on specialised teams to defend against sophisticated cyber threats. However, even the most advanced tools and techniques are only as effective as the leadership guiding their use. Cybersecurity leadership requires a dynamic blend of technical know-how, strategic thinking, and people-management skills to maintain readiness against ever-evolving threats. This article is designed for professionals aiming to lead cybersecurity teams or transition into managerial roles where understanding how to motivate, mentor, and set realistic goals is paramount. With insights into building high-performing teams, fostering collaboration, and embracing continuous learning, you’ll be equipped to protect your organisation from a broad spectrum of cyber risks.

10 Must-Read Cyber Security Books for UK Professionals: Boost Your Career and Stay Ahead of Threats

With rapid advancements in digital infrastructure, cloud computing, and the Internet of Things (IoT), cyber threats continue to evolve at lightning speed. For organisations across the UK—and globally—robust cyber security is no longer optional: It’s a strategic imperative. From healthcare and finance to government agencies and tech start-ups, every sector needs skilled professionals to safeguard critical data and protect users. If you’re looking to break into or advance within the cyber security industry, staying updated on the latest techniques, threat landscapes, and defence strategies is paramount. One of the best ways to build and sharpen your expertise is by reading authoritative, high-quality books that combine foundational knowledge with cutting-edge insights. In this guide, we’ve compiled a list of ten books that cater to various skill levels, spanning ethical hacking and threat intelligence to secure software development and cryptography. By diving into these resources, you’ll fortify your understanding of cyber security fundamentals, explore hands-on techniques for defending systems, and gain the strategic perspective needed to excel in roles throughout the UK’s thriving cyber security landscape.