Remote job
Staff Security Engineer - Blue Team (UK)
Job details
About this role
Role overview
Lead the technical work of a security blue team protecting a digital platform and the information it handles. The role combines security strategy with hands-on oversight of engineers and analysts, risk-based project planning, and partnership with product teams, customers, and external reviewers. The position can be performed remotely from Northern Ireland.
Responsibilities
- Coach and guide security staff across information protection, incident detection and response, and service delivery. - Set technical direction for a team that investigates, hunts, and responds to internal and external threats. - Prioritize security initiatives according to risk and lead cross-functional work through to completion. - Oversee vulnerability assessments, risk scoring, remediation, threat hunting, and security reviews of systems and designs. - Select, implement, maintain, and assess security tools and controls; improve automation and adapt defenses as threats change. - Give product teams actionable advice to reduce vulnerabilities, and work with customers and partners to strengthen security.
Requirements
- At least five years in security engineering, security operations, or security architecture. - Experience leading distributed teams, including remote engineers, and coordinating incident response and remediation. - Knowledge of attacker techniques, incident investigation, security standards, and regulatory compliance such as PCI-DSS. - Strong understanding of operating systems, networking, and application security; experience hardening Windows, macOS, Linux containers, and Kubernetes. - Familiarity with AWS security practices and infrastructure as code, plus experience deploying and maintaining security technologies. - Ability to work across product, engineering, legal, people, finance, commercial teams, external partners, auditors, and customers; availability to support critical incidents.
Nice to have
- CISSP, GCIH, or a comparable security certification. - Experience supporting PCI and SOC audits, managing service providers, and evaluating web applications and APIs.