IT Security Engineer

We are hiring an experienced, hands-on IT Security Engineer to join our Corporate IT team in a hybrid role based in Glasgow. The focus of this role is securing the infrastructure end to end — identity, endpoints, networks, on-premise servers and storage — and extending that protection into our new automated lab, where robotics, connected fume cupboards and automated storage and conveyance systems sit alongside our corporate estate.

Reporting to the Head of IT, you will own the security posture and drive the business towards achieving and maintaining ISO 27001 and SOC 2. You will partner with infrastructure, software, automation and operations teams, as well as external equipment vendors, to make sure security is designed in from the start rather than added afterwards.

This role would suit a candidate who is equally comfortable hardening a firewall, tightening conditional access policies and assessing a vendor’s remote-access request. If you thrive in a small, dynamic team with a start-up mentality and want real ownership of security across office, laboratory and manufacturing environments, this is the role for you.

Key Responsibilities:

Network & Infrastructure Security

• Own firewall policy, VPN and zero-trust access controls, including secure remote access for third-party equipment and software vendors
• Harden on-premise infrastructure including virtualisation hosts (Proxmox), storage and backup platforms, ensuring backups are immutable and resilient to ransomware

Operational Technology (OT) & Laboratory Security

• Work with automation, software and operations teams to define security requirements for new lab equipment before purchase and commissioning
• Identify and remediate cyber risks across an extended-hours automated laboratory environment

Identity & Endpoint Security

• Strengthen Microsoft Entra ID security including conditional access, privileged identity management (PIM), admin account separation and access reviews
• Partner with the Infrastructure team on endpoint security baselines delivered via Microsoft Intune and Microsoft Defender for Endpoint
• Implement automated identity, access and authorisation controls across cloud and on-premise platforms

Vulnerability, Incident & Vendor Management

• Own vulnerability management and security incident response processes, ensuring findings are triaged, tracked and remediated
• Coordinate penetration testing and lead threat modelling exercises for new services and sites
• Lead vendor security assessments, vendor access controls and software security reviews through our security compliance and automation platform

Compliance, Governance & Physical Security

• Drive and maintain progress toward ISO 27001 and SOC 2 certification, owning technical controls and evidence within Vanta
• Implement security monitoring, logging and alerting across the estate, including new on-premise infrastructure
• Support physical security systems (CCTV and access control), including Data Protection Impact Assessments in line with UK GDPR
• Contribute to business continuity and disaster recovery planning, including regular restore testing

What You’ll Bring

• Degree in Science, IT, Engineering, or a related field, or equivalent practical experience
• 4+ years in a cyber / IT security, network security or security-focused infrastructure role
• Hands-on experience with firewalls, VPN and network segmentation (e.g. Cisco, Meraki, Fortinet or Palo Alto)
• Strong working knowledge of Microsoft Entra ID security, including conditional access and privileged access
• Solid Linux and Windows server hardening and administration skills
• Experience securing virtualisation, storage and backup platforms
• Working knowledge of ISO 27001, Cyber Essentials and UK GDPR
• Experience running vulnerability management and incident response processes
• Clear communication skills and the ability to engage stakeholders, vendors and contractors at all levels

Beneficial Skills

• Professional security certifications such as CISSP, SSCP, CompTIA Security+, GICSP or ISA/IEC 62443
• Experience securing OT/ICS, laboratory, pharmaceutical or manufacturing environments
• Hands-on experience with Vanta or a comparable security compliance and automation platform
• Familiarity with SIEM/SOAR tooling (e.g. Microsoft Sentinel) and Microsoft Defender XDR
• Scripting experience in Python or PowerShell
• Exposure to Proxmox, Veeam or Proxmox Backup Server
• ITSM experience and familiarity with the ITIL framework
• UK driving license and willingness to support across our three Glasgow sites