Senior Security Engineer

Title:Senior Security Engineer

Salary:£70,000 - £80,000

Address:Borough, London (UK), 2-3 days per week in the office

Overview of role

We are seeking a Senior Security Engineer to join our team. If you have a passion for cybersecurity, thrive on solving complex security challenges, and are experienced in advanced threat detection and response, we’d love to hear from you!

As a Senior Security Engineer, you will be responsible for protecting our systems, networks, and data from cyber threats. You will lead and be hands-on in monitoring, detecting and responding to security incidents, performing risk assessments, and ensuring compliance with security policies and regulations. This is a key role where you will lead our security function, be solely responsible for all security activities across the company and collaborate with cross-functional teams to design and implement advanced security measures.

Responsibilities

• Define and communicate the cybersecurity strategy, ensuring alignment with business goals and the scalability of security systems.
• Stay current with industry trends, best practices, and emerging technologies in cybersecurity and understand their application to our environment. Be our security subject matter expert to influence decisions at all levels.
• Manage security related projects across teams, consult and collaborate with others and have a hands-on role in the completion of security projects.
• Ensure platform security by design and provide technical guidance aligned with the product roadmap.
• Conduct vulnerability assessments, manage security risks, and respond to threat intelligence feeds.
• Monitor systems and networks for suspicious activity and engage in response procedures as necessary.
• Manage and document all stages of security incident response, including detection, containment, and recovery. Work closely with the Crisis Management Team and be prepared to respond, liaise with customers and take action, as and when needed.
• Assist in the creation, implementation, and maintenance of cybersecurity policies and procedures.
• Manage annual network penetration tests, CyberEssentials SAQ and CyberEssentials+, support ISMS control design, and drive compliance with relevant security frameworks.
• Represent the company in customer meetings and at events as appropriate.
• Lead and mentor colleagues in cybersecurity practices, create and manage staff training and promote a security-conscious culture.

Minimum requirements of role

• 5+ years of experience in a cybersecurity role, with at least 2 years as a Security Engineer
• In-depth knowledge of security protocols, encryption, authentication, and risk management
• Hands-on experience with security technologies such as SIEM, IDS/IPS, firewalls, and endpoint protection
• Strong understanding of cloud security (AWS, Azure, Google Cloud) and network security architecture
• Experience conducting vulnerability assessments, incident response, and forensics using tools such as Nessus
• Proficiency in threat hunting, malware analysis, and intrusion detection techniques
• Familiarity with compliance frameworks (e.g., NIST, ISO, PCI-DSS) and regulatory requirements
• Strong analytical skills with the ability to think like an attacker and find creative security solutions
• Experience of working in a hands-on role as part of a small team, as well as providing security leadership and expertise
• Excellent communication skills and the ability to present complex technical information to both technical and non-technical audiences including colleagues, senior management and to customers

Certifications (Preferred)

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CEH (Certified Ethical Hacker)
• GIAC certifications (e.g., GSEC, GCIA, GPEN)
• Experience with SOC 2 or ISO 27001 audits is a plus

About Cloud Gateway

Cloud Gateway was founded in 2017 with a singular vision:Connect Anything to Everything Immediately.

Cloud Gateway was born from a shared frustration that networking was being left behind. Amongst the clamour to embrace cloud technology, little thought was being given to existing on-prem operations, and even less to the corporate network connecting everything together. Expensive vendor contracts, long lead times, and poor service are still prevalent in the telecommunications sector.

Cloud Gateway is a boutique MSP provider, combining best-of-breed technology with deep network and security expertise. We are the only tech-enabled MSP in the UK market, providing public and private sector customers with a platform to view and monitor their network and security infrastructure, along with the flow of data. Our connectivity and security solutions eliminate the bottlenecks that stifle innovation and digital transformation.

The business is experiencing rapid growth and plans to accelerate this success in 2024 and beyond. We have an ambitious product roadmap and are building a team that can execute our growth strategy.

We passionately believe that our people are the greatest asset we have. Everyone in the business has an important role to play and we’re committed to supporting the development and progression of all our staff.

Company values

We are looking for an individual that understands and reflects our core values, which are;

• Fearlessly Innovate
• Learn and Adapt
• Customer-centric Excellence
• Empowerment & Ownership