company_site
Security Engineer
First Intuition
London, GBR
Mid · 2–3 years experience
Hybrid
Discovered Today
awsazurelinuxpowershellpython
Key Skills for This Role
awsazurelinuxpowershellpython
Full Job Posting
What You’ll Do
- Operate and continuously improve the end-to-end vulnerability management lifecycle across endpoints, servers, networks, cloud services and applications.
- Run and review authenticated vulnerability assessments using Qualys, validate findings and reduce false positives.
- Prioritise vulnerabilities using exploitability, threat intelligence, internet exposure, asset criticality, business impact and technical severity rather than relying on CVSS alone.
- Translate findings into clear remediation plans with defined owners, target dates and verification criteria.
- Work with system and application owners to remediate vulnerabilities through patching, configuration changes, hardening, upgrades or compensating controls.
- Develop security automation, preferably using Python, to improve vulnerability triage, remediation workflows, data enrichment and fix validation.
- Test, coordinate and validate security patches and configuration changes while balancing security risk and operational impact.
- Support the SOC from an engineering perspective by improving security tooling, integrations, alert enrichment and automated response processes.
- Assist with security investigations where vulnerabilities, insecure configurations or missing patches may have contributed to an event.
- Use threat intelligence to provide context for vulnerability prioritisation, security alerts and emerging threats.
- Apply Zero Trust principles when implementing or improving endpoint, identity, network and cloud security controls.
- Review network-device configurations and firewall rule sets using Nipper Studio or comparable security auditing tools.
- Track vulnerabilities, exceptions and remediation progress through to verified closure.
- Produce security metrics and dashboards covering exposure, vulnerability ageing, remediation performance and residual risk.
- Maintain technical documentation, remediation playbooks and security automation code.
- Carry out tasks as delegated by the Information Systems Security Manager from time to time.
What You’ll Bring
- Essential
- Two to three years’ experience in cyber security, security engineering, infrastructure engineering, IT operations or a related technical role.
- Hands-on experience with vulnerability scanning, assessment and remediation using Qualys or a comparable enterprise platform.
- Demonstrable ability to analyse, validate and prioritise vulnerabilities using technical and business risk factors.
- Practical experience driving remediation across Windows, Linux, endpoints, networks, cloud services or applications.
- Scripting capability for security automation. Either Python or PowerShell is strongly preferred, particularly for automating vulnerability identification, triage, remediation and validation procedures.
- An understanding of CVEs, CVSS, known exploited vulnerabilities, threat intelligence, attack paths, security hardening and compensating controls.
- An understanding of security operations, including security monitoring, alert investigation and incident response processes.
- A practical understanding of Zero Trust security principles.
- The ability to manage multiple remediation activities and maintain momentum from identification through to verified closure.
- Strong written and verbal communication skills, with the ability to explain technical risks and remediation requirements to technical and non-technical stakeholders.
- Right to live and work in the UK and ability to travel, when required, to centres.
- Desirable
- Experience with Microsoft 365 E5/A5 security technologies, including Defender for Endpoint Plan 2 and Defender for Office 365 Plan 2.
- Experience with vulnerability assessment and management tools, preferably Qualys.
- Experience with firewall and network-security auditing tools, preferably Nipper Studio.
- Experience supporting security operations, SIEM, threat intelligence or incident investigations.
- Experience with Microsoft Intune, Entra ID, Azure or AWS security.
- Relevant certifications, such as Microsoft SC-900 or CompTIA Security+.
- What Success Looks Like
- Vulnerabilities are accurately identified, risk-ranked, assigned and remediated within agreed service levels.
- Critical and actively exploited vulnerabilities receive rapid, intelligence-led attention.
- Remediation is technically verified and recurring vulnerabilities are reduced.
- Python automation shortens vulnerability triage and remediation cycles and reduces repetitive manual work.
- The SOC benefits from reliable security tooling, useful integrations and improved automation.
- Reporting provides a clear view of material exposure, remediation performance and residual risk.
- Security, Infrastructure, IT Operations and application teams share accountability for reducing security risk.
Preferred Qualifications
- Scripting capability for security automation. Either Python or PowerShell is strongly preferred, particularly for automating vulnerability identification, triage, remediation and validation procedures.
About First Intuition
Career & Technical Training327 employeesFounded 2007
UK accountancy training provider delivering apprenticeships and professional qualifications to employers and learners.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at First Intuition
Security Engineer
London, GBR
JuniorFull-time
First Intuition is seeking a hands-on Security Engineer focused on vulnerability management, security automation and improving security controls. You’ll manage vulnerability assessment through verified remediation and im
Discovered 2 weeks agoView →
Skills Facilitator
London, GBR
Discovered Today
Accountancy Tutor
Manchester, GBR
Discovered Today
Client Support Co-ordinator - Internal Vacancy Only
London, GBR
Discovered Today
Data and Compliance Administrator - Internal Vacancy Only
, GBR
Discovered Today
Client Customer Service Advisor - (Client Partner)
Reading, GBR
Discovered Today
Accountancy Tutor
Newcastle, GBR
Discovered Today
Security Engineer
London, GBR
Discovered 2 weeks agoFull-time
Tutor
London, GBR
Discovered 1 months agoFull-time